./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec1_product01.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 3061b6dc Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec1_product01.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a24bdc0807d94f83606acfe112db107808ae7409e0ad1ecc1d01e9704d0b4ece --- Real Ultimate output --- This is Ultimate 0.2.5-tmp.dk.eval-assert-order-craig-3061b6d-m [2024-11-19 14:48:51,720 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-19 14:48:51,799 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-19 14:48:51,804 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-19 14:48:51,806 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-19 14:48:51,836 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-19 14:48:51,838 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-19 14:48:51,838 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-19 14:48:51,839 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-19 14:48:51,841 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-19 14:48:51,842 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-19 14:48:51,842 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-19 14:48:51,842 INFO L153 SettingsManager]: * Use SBE=true [2024-11-19 14:48:51,843 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-19 14:48:51,843 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-19 14:48:51,843 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-19 14:48:51,843 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-19 14:48:51,844 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-19 14:48:51,848 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-19 14:48:51,849 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-19 14:48:51,849 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-19 14:48:51,849 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-19 14:48:51,850 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-19 14:48:51,850 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-19 14:48:51,850 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-19 14:48:51,850 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-19 14:48:51,850 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-19 14:48:51,851 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-19 14:48:51,851 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-19 14:48:51,851 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-19 14:48:51,851 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-19 14:48:51,851 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-19 14:48:51,852 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-19 14:48:51,852 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-19 14:48:51,852 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-19 14:48:51,852 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-19 14:48:51,853 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-19 14:48:51,853 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-19 14:48:51,854 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-19 14:48:51,855 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a24bdc0807d94f83606acfe112db107808ae7409e0ad1ecc1d01e9704d0b4ece [2024-11-19 14:48:52,108 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-19 14:48:52,132 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-19 14:48:52,137 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-19 14:48:52,138 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-19 14:48:52,139 INFO L274 PluginConnector]: CDTParser initialized [2024-11-19 14:48:52,140 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec1_product01.cil.c [2024-11-19 14:48:53,598 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-19 14:48:53,922 INFO L384 CDTParser]: Found 1 translation units. [2024-11-19 14:48:53,923 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product01.cil.c [2024-11-19 14:48:53,955 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/202d53ede/af24aa5bd3364385991552a402718238/FLAG09feb6093 [2024-11-19 14:48:53,971 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/202d53ede/af24aa5bd3364385991552a402718238 [2024-11-19 14:48:53,974 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-19 14:48:53,976 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-19 14:48:53,977 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-19 14:48:53,977 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-19 14:48:53,982 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-19 14:48:53,983 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 02:48:53" (1/1) ... [2024-11-19 14:48:53,984 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@75015fa9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:53, skipping insertion in model container [2024-11-19 14:48:53,984 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 02:48:53" (1/1) ... [2024-11-19 14:48:54,047 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-19 14:48:54,541 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-19 14:48:54,561 INFO L200 MainTranslator]: Completed pre-run [2024-11-19 14:48:54,570 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [48] [2024-11-19 14:48:54,572 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [57] [2024-11-19 14:48:54,572 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [1490] [2024-11-19 14:48:54,573 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [1849] [2024-11-19 14:48:54,573 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [2515] [2024-11-19 14:48:54,573 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [2881] [2024-11-19 14:48:54,573 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [2894] [2024-11-19 14:48:54,573 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [2985] [2024-11-19 14:48:54,573 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [3104] [2024-11-19 14:48:54,574 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [3139] [2024-11-19 14:48:54,697 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-19 14:48:54,741 INFO L204 MainTranslator]: Completed translation [2024-11-19 14:48:54,741 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:54 WrapperNode [2024-11-19 14:48:54,742 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-19 14:48:54,743 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-19 14:48:54,743 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-19 14:48:54,743 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-19 14:48:54,750 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:54" (1/1) ... [2024-11-19 14:48:54,785 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:54" (1/1) ... [2024-11-19 14:48:54,932 INFO L138 Inliner]: procedures = 88, calls = 330, calls flagged for inlining = 183, calls inlined = 227, statements flattened = 7532 [2024-11-19 14:48:54,933 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-19 14:48:54,934 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-19 14:48:54,934 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-19 14:48:54,934 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-19 14:48:54,945 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:54" (1/1) ... [2024-11-19 14:48:54,945 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:54" (1/1) ... [2024-11-19 14:48:54,965 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:54" (1/1) ... [2024-11-19 14:48:55,029 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-19 14:48:55,029 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:54" (1/1) ... [2024-11-19 14:48:55,030 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:54" (1/1) ... [2024-11-19 14:48:55,096 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:54" (1/1) ... [2024-11-19 14:48:55,214 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:54" (1/1) ... [2024-11-19 14:48:55,237 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:54" (1/1) ... [2024-11-19 14:48:55,261 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:54" (1/1) ... [2024-11-19 14:48:55,315 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-19 14:48:55,317 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-19 14:48:55,317 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-19 14:48:55,317 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-19 14:48:55,318 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:54" (1/1) ... [2024-11-19 14:48:55,324 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-19 14:48:55,337 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-19 14:48:55,354 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-19 14:48:55,356 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-19 14:48:55,402 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-19 14:48:55,402 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-19 14:48:55,402 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-19 14:48:55,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-19 14:48:55,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-19 14:48:55,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-19 14:48:55,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-19 14:48:55,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-19 14:48:55,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-19 14:48:55,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-19 14:48:55,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-19 14:48:55,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-19 14:48:55,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-19 14:48:55,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-19 14:48:55,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-19 14:48:55,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-19 14:48:55,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-19 14:48:55,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-19 14:48:55,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-19 14:48:55,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-19 14:48:55,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-19 14:48:55,405 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-19 14:48:55,405 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-19 14:48:55,633 INFO L238 CfgBuilder]: Building ICFG [2024-11-19 14:48:55,635 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-19 14:48:59,839 INFO L? ?]: Removed 3485 outVars from TransFormulas that were not future-live. [2024-11-19 14:48:59,840 INFO L287 CfgBuilder]: Performing block encoding [2024-11-19 14:48:59,903 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-19 14:48:59,904 INFO L316 CfgBuilder]: Removed 1 assume(true) statements. [2024-11-19 14:48:59,905 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 02:48:59 BoogieIcfgContainer [2024-11-19 14:48:59,905 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-19 14:48:59,906 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-19 14:48:59,906 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-19 14:48:59,910 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-19 14:48:59,911 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-19 14:48:59,911 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 19.11 02:48:53" (1/3) ... [2024-11-19 14:48:59,912 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5e4fb636 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 19.11 02:48:59, skipping insertion in model container [2024-11-19 14:48:59,912 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-19 14:48:59,912 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:48:54" (2/3) ... [2024-11-19 14:48:59,914 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5e4fb636 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 19.11 02:48:59, skipping insertion in model container [2024-11-19 14:48:59,914 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-19 14:48:59,914 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 02:48:59" (3/3) ... [2024-11-19 14:48:59,915 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product01.cil.c [2024-11-19 14:49:00,003 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-11-19 14:49:00,004 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-11-19 14:49:00,004 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-19 14:49:00,004 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-19 14:49:00,004 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-19 14:49:00,004 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-11-19 14:49:00,005 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-19 14:49:00,005 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-19 14:49:00,020 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2275 states, 2274 states have (on average 1.8768689533861038) internal successors, (4268), 2274 states have internal predecessors, (4268), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:00,108 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1087 [2024-11-19 14:49:00,109 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:00,109 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:00,128 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:00,128 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:00,129 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-19 14:49:00,134 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2275 states, 2274 states have (on average 1.8768689533861038) internal successors, (4268), 2274 states have internal predecessors, (4268), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:00,161 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1087 [2024-11-19 14:49:00,162 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:00,162 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:00,166 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:00,167 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:00,174 INFO L745 eck$LassoCheckResult]: Stem: 162#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2198#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 868#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 520#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 647#valid_product_returnLabel#1true main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 399#L1836true assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1495#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1792#__utac_acc__Specification1_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 702#L3030true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 173#getOrigin_returnLabel#1true bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2200#L2208true assume 0 == initPersonOnFloor_~floor#1; 2041#L2209true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 328#L2316-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1035#L3161true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 2065#L3173-2true havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1664#L2000true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 354#L2012-2true havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 952#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 395#bigMacCall_returnLabel#1true havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 183#L3030-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 359#getOrigin_returnLabel#2true angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 294#L2208-1true assume 0 == initPersonOnFloor_~floor#1; 629#L2209-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2212#L2316-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 115#L3161-2true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 296#L3173-5true havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 748#L2000-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 463#L2012-5true havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 956#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 681#angelinaCall_returnLabel#1true havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 199#L1932true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 87#isFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 326#L885true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 248#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 467#L1034true assume !(0 != timeShift_~tmp___9~2#1); 1545#L1125true assume !(1 == ~doorState~0); 69#L1125-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1465#L476true assume !(1 == stopRequestedInDirection_~dir#1); 1558#L645true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1597#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 119#L1133true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 711#L852true assume !(1 == ~currentHeading~0); 1505#L862true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 122#L862-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 936#L868-1true havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1286#L1142-2true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1039#getCurrentFloorID_returnLabel#1true __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1312#L3199true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 194#L3200true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 685#areDoorsOpen_returnLabel#1true __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 132#L3204true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 891#L3259true havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1914#timeShift_returnLabel#1true havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 223#L1637-2true [2024-11-19 14:49:00,180 INFO L747 eck$LassoCheckResult]: Loop: 223#L1637-2true assume !false; 180#L1638true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1601#L1641true assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 864#isBlocked_returnLabel#1true cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1661#L1645true assume 1 != cleanup_~tmp___0~6#1; 1140#L1645-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 542#L1932-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1386#isFloorCalling_returnLabel#22true anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 216#L380true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 133#anyStopRequested_returnLabel#1true isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1082#isIdle_returnLabel#1true cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1798#L1657true assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 91#L1932-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1092#isFloorCalling_returnLabel#27true stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 545#L885-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1977#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1905#L1034-2true assume !(0 != timeShift_~tmp___9~2#1); 1703#L1125-3true assume 1 == ~doorState~0;~doorState~0 := 0; 820#L1125-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1611#L476-2true assume !(1 == stopRequestedInDirection_~dir#1); 192#L645-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1128#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 536#L1133-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 575#L852-3true assume !(1 == ~currentHeading~0); 253#L862-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1941#L862-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1921#L868-7true havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 976#L1142-5true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1309#getCurrentFloorID_returnLabel#2true __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1045#L3199-1true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2067#L3200-1true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1353#areDoorsOpen_returnLabel#6true __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1838#L3204-2true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 2094#L3259-1true havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1939#timeShift_returnLabel#2true havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 223#L1637-2true [2024-11-19 14:49:00,191 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:00,195 INFO L85 PathProgramCache]: Analyzing trace with hash -1122916155, now seen corresponding path program 1 times [2024-11-19 14:49:00,204 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:00,204 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1033390346] [2024-11-19 14:49:00,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:00,205 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:00,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:00,663 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:00,663 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:00,664 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1033390346] [2024-11-19 14:49:00,665 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1033390346] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:00,665 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:00,665 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:00,667 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1201350047] [2024-11-19 14:49:00,668 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:00,673 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:00,673 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:00,674 INFO L85 PathProgramCache]: Analyzing trace with hash -452256857, now seen corresponding path program 1 times [2024-11-19 14:49:00,674 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:00,674 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [250009779] [2024-11-19 14:49:00,674 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:00,674 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:00,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:00,817 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:00,817 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:00,817 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [250009779] [2024-11-19 14:49:00,818 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [250009779] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:00,819 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:00,819 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-19 14:49:00,819 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1502839537] [2024-11-19 14:49:00,819 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:00,820 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:00,821 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:00,852 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-19 14:49:00,853 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-19 14:49:00,860 INFO L87 Difference]: Start difference. First operand has 2275 states, 2274 states have (on average 1.8768689533861038) internal successors, (4268), 2274 states have internal predecessors, (4268), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 6 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:01,056 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:01,056 INFO L93 Difference]: Finished difference Result 2269 states and 4254 transitions. [2024-11-19 14:49:01,058 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 2269 states and 4254 transitions. [2024-11-19 14:49:01,075 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1089 [2024-11-19 14:49:01,094 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 2269 states to 2251 states and 4234 transitions. [2024-11-19 14:49:01,095 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 2251 [2024-11-19 14:49:01,099 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 2251 [2024-11-19 14:49:01,101 INFO L73 IsDeterministic]: Start isDeterministic. Operand 2251 states and 4234 transitions. [2024-11-19 14:49:01,113 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:01,114 INFO L218 hiAutomatonCegarLoop]: Abstraction has 2251 states and 4234 transitions. [2024-11-19 14:49:01,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2251 states and 4234 transitions. [2024-11-19 14:49:01,209 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2251 to 2251. [2024-11-19 14:49:01,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2251 states, 2251 states have (on average 1.8809418036428254) internal successors, (4234), 2250 states have internal predecessors, (4234), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:01,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2251 states to 2251 states and 4234 transitions. [2024-11-19 14:49:01,224 INFO L240 hiAutomatonCegarLoop]: Abstraction has 2251 states and 4234 transitions. [2024-11-19 14:49:01,225 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-19 14:49:01,230 INFO L425 stractBuchiCegarLoop]: Abstraction has 2251 states and 4234 transitions. [2024-11-19 14:49:01,230 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-19 14:49:01,230 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2251 states and 4234 transitions. [2024-11-19 14:49:01,247 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1089 [2024-11-19 14:49:01,247 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:01,247 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:01,250 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:01,252 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:01,252 INFO L745 eck$LassoCheckResult]: Stem: 4935#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 4936#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 6023#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5567#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 5568#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 5379#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 5380#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6563#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 5820#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 4962#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4963#L2208 assume 0 == initPersonOnFloor_~floor#1; 6783#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4721#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 5249#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 6198#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6650#L2000 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5299#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 5300#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 5373#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 4979#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 4623#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5188#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 5189#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4809#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 4830#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 4831#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 5194#L2000-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5478#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 5479#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 5797#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 5015#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 4731#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 4767#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 5246#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 5293#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 5975#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 5976#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 6807#L1034 assume !(0 != timeShift_~tmp___9~2#1); 6591#L1125 assume !(1 == ~doorState~0); 4722#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 4723#L476 assume !(1 == stopRequestedInDirection_~dir#1); 6544#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 4681#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 4838#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 4840#L852 assume !(1 == ~currentHeading~0); 5833#L862 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4846#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4847#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5382#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6204#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 6205#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 5002#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 5003#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 4870#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 4871#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6050#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 5056#L1637-2 [2024-11-19 14:49:01,253 INFO L747 eck$LassoCheckResult]: Loop: 5056#L1637-2 assume !false; 4975#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 4976#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 6017#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 6018#L1645 assume 1 != cleanup_~tmp___0~6#1; 6306#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 5606#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 5607#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 5045#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 4858#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 4873#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 6255#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 4777#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 4638#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 5614#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 5616#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 5309#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 5623#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 6698#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 6806#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 6669#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 5971#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5972#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 4999#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 4754#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 5594#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 5595#L852-3 assume !(1 == ~currentHeading~0); 5115#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5116#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6750#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 6136#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6137#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 6210#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 6211#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 6457#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 6458#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 5577#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6759#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 5056#L1637-2 [2024-11-19 14:49:01,254 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:01,254 INFO L85 PathProgramCache]: Analyzing trace with hash 449391300, now seen corresponding path program 1 times [2024-11-19 14:49:01,254 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:01,255 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [980146681] [2024-11-19 14:49:01,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:01,256 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:01,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:01,366 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:01,367 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:01,367 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [980146681] [2024-11-19 14:49:01,367 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [980146681] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:01,367 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:01,367 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:01,367 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [721394419] [2024-11-19 14:49:01,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:01,368 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:01,368 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:01,368 INFO L85 PathProgramCache]: Analyzing trace with hash 2100900210, now seen corresponding path program 1 times [2024-11-19 14:49:01,369 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:01,369 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1642603585] [2024-11-19 14:49:01,369 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:01,371 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:01,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:01,477 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:01,478 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:01,478 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1642603585] [2024-11-19 14:49:01,478 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1642603585] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:01,478 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:01,479 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:01,479 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1146733701] [2024-11-19 14:49:01,479 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:01,479 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:01,479 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:01,480 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-19 14:49:01,480 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-19 14:49:01,481 INFO L87 Difference]: Start difference. First operand 2251 states and 4234 transitions. cyclomatic complexity: 1984 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:02,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:02,619 INFO L93 Difference]: Finished difference Result 4538 states and 8454 transitions. [2024-11-19 14:49:02,619 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4538 states and 8454 transitions. [2024-11-19 14:49:02,659 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2233 [2024-11-19 14:49:02,690 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4538 states to 4538 states and 8454 transitions. [2024-11-19 14:49:02,691 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4538 [2024-11-19 14:49:02,696 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4538 [2024-11-19 14:49:02,697 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4538 states and 8454 transitions. [2024-11-19 14:49:02,705 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:02,705 INFO L218 hiAutomatonCegarLoop]: Abstraction has 4538 states and 8454 transitions. [2024-11-19 14:49:02,711 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4538 states and 8454 transitions. [2024-11-19 14:49:02,781 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4538 to 4448. [2024-11-19 14:49:02,791 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4448 states, 4448 states have (on average 1.8803956834532374) internal successors, (8364), 4447 states have internal predecessors, (8364), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:02,808 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4448 states to 4448 states and 8364 transitions. [2024-11-19 14:49:02,809 INFO L240 hiAutomatonCegarLoop]: Abstraction has 4448 states and 8364 transitions. [2024-11-19 14:49:02,810 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-19 14:49:02,810 INFO L425 stractBuchiCegarLoop]: Abstraction has 4448 states and 8364 transitions. [2024-11-19 14:49:02,810 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-19 14:49:02,811 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4448 states and 8364 transitions. [2024-11-19 14:49:02,839 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2184 [2024-11-19 14:49:02,840 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:02,840 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:02,842 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:02,842 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:02,842 INFO L745 eck$LassoCheckResult]: Stem: 11747#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 11748#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 12897#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 12399#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 12400#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 12198#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 12199#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 13510#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 12679#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 11772#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 11773#L2208 assume 0 == initPersonOnFloor_~floor#1; 13820#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 11528#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 12061#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 13088#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 13627#L2000 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 13628#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 13934#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 13933#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 13929#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 13926#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 13925#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 13901#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 13868#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 11639#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 11640#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 12006#L2000-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 12749#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 13887#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 13886#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 13884#L1932 assume !(0 == isFloorCalling_~floorID#1); 13885#L1936 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 13879#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 13878#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 13866#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 12107#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 12845#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 12846#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 13882#L1034 assume !(0 != timeShift_~tmp___9~2#1); 13883#L1125 assume !(1 == ~doorState~0); 15597#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 15596#L476 assume !(1 == stopRequestedInDirection_~dir#1); 15547#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 15544#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 15542#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 15543#L852 assume !(1 == ~currentHeading~0); 13519#L862 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 11655#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 11656#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 14035#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 14034#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 14033#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 14028#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 14026#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 11679#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 11680#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 13764#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 13765#L1637-2 [2024-11-19 14:49:02,843 INFO L747 eck$LassoCheckResult]: Loop: 13765#L1637-2 assume !false; 11785#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 11786#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 12889#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 12890#L1645 assume 1 != cleanup_~tmp___0~6#1; 13210#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 13211#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 13971#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 11856#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 11682#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 11683#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 13702#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 13703#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 13939#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 13938#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 13937#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 12457#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 12125#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 12454#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 13693#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 13880#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 13656#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 12841#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 12842#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 13587#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 13194#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 13195#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 12491#L852-3 assume !(1 == ~currentHeading~0); 12492#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 13779#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 13780#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 13982#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 13981#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 13980#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 13979#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 13978#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 13727#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 12409#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 13778#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 13765#L1637-2 [2024-11-19 14:49:02,843 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:02,844 INFO L85 PathProgramCache]: Analyzing trace with hash -1526609697, now seen corresponding path program 1 times [2024-11-19 14:49:02,844 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:02,844 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [887592044] [2024-11-19 14:49:02,844 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:02,844 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:02,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:02,926 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:02,926 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:02,926 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [887592044] [2024-11-19 14:49:02,927 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [887592044] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:02,927 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:02,927 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:02,927 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1325720608] [2024-11-19 14:49:02,927 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:02,928 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:02,928 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:02,928 INFO L85 PathProgramCache]: Analyzing trace with hash -470143295, now seen corresponding path program 1 times [2024-11-19 14:49:02,929 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:02,929 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1259773774] [2024-11-19 14:49:02,929 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:02,929 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:02,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:03,022 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:03,022 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:03,023 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1259773774] [2024-11-19 14:49:03,023 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1259773774] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:03,023 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:03,023 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:03,023 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [663629073] [2024-11-19 14:49:03,023 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:03,024 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:03,024 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:03,024 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:03,024 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:03,024 INFO L87 Difference]: Start difference. First operand 4448 states and 8364 transitions. cyclomatic complexity: 3917 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:04,390 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:04,391 INFO L93 Difference]: Finished difference Result 7832 states and 14709 transitions. [2024-11-19 14:49:04,391 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 7832 states and 14709 transitions. [2024-11-19 14:49:04,443 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3928 [2024-11-19 14:49:04,494 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 7832 states to 7832 states and 14709 transitions. [2024-11-19 14:49:04,494 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 7832 [2024-11-19 14:49:04,506 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 7832 [2024-11-19 14:49:04,506 INFO L73 IsDeterministic]: Start isDeterministic. Operand 7832 states and 14709 transitions. [2024-11-19 14:49:04,520 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:04,520 INFO L218 hiAutomatonCegarLoop]: Abstraction has 7832 states and 14709 transitions. [2024-11-19 14:49:04,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7832 states and 14709 transitions. [2024-11-19 14:49:04,710 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7832 to 7814. [2024-11-19 14:49:04,728 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7814 states, 7814 states have (on average 1.8785513181469158) internal successors, (14679), 7813 states have internal predecessors, (14679), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:04,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7814 states to 7814 states and 14679 transitions. [2024-11-19 14:49:04,754 INFO L240 hiAutomatonCegarLoop]: Abstraction has 7814 states and 14679 transitions. [2024-11-19 14:49:04,755 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-19 14:49:04,756 INFO L425 stractBuchiCegarLoop]: Abstraction has 7814 states and 14679 transitions. [2024-11-19 14:49:04,756 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-19 14:49:04,756 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7814 states and 14679 transitions. [2024-11-19 14:49:04,795 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3919 [2024-11-19 14:49:04,795 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:04,795 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:04,800 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:04,801 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:04,801 INFO L745 eck$LassoCheckResult]: Stem: 24039#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 24040#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 25166#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 24690#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 24691#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 24493#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 24494#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 25747#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 24952#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 24064#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 24065#L2208 assume 0 == initPersonOnFloor_~floor#1; 26030#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 23820#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 24363#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 25358#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 25857#L2000 assume !(0 == callOnFloor_~floorID#1); 25859#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 24411#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 24412#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 24487#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 24084#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 23722#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 24298#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 24299#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 26061#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 26062#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 24304#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 24305#L2000-2 assume !(0 == callOnFloor_~floorID#1); 25677#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 24592#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 24593#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 24925#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 24926#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 29533#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 26074#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 26059#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 24405#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 25113#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 25114#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 31372#L1034 assume !(0 != timeShift_~tmp___9~2#1); 25781#L1125 assume !(1 == ~doorState~0); 23826#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 23827#L476 assume !(1 == stopRequestedInDirection_~dir#1); 25724#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 23780#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 23939#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 23941#L852 assume !(1 == ~currentHeading~0); 31467#L862 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 23947#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23948#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 26254#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 26252#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 26250#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 26246#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 26239#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 26222#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 26210#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 26208#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 26206#L1637-2 [2024-11-19 14:49:04,802 INFO L747 eck$LassoCheckResult]: Loop: 26206#L1637-2 assume !false; 26205#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 26204#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 26203#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 26202#L1645 assume 1 != cleanup_~tmp___0~6#1; 26201#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 26200#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 26188#L1936-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 26174#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 26166#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 26157#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 26156#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 26155#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 26154#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 26153#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 26151#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 26149#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 26143#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 26140#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 26130#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 26129#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 26128#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 26127#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 26108#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 26094#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 26083#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 26081#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 26082#L852-3 assume !(1 == ~currentHeading~0); 31464#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 24221#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 25993#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 26253#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 26251#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 26249#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 26244#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 26237#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 26216#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 26209#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 26207#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 26206#L1637-2 [2024-11-19 14:49:04,803 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:04,803 INFO L85 PathProgramCache]: Analyzing trace with hash 398565134, now seen corresponding path program 1 times [2024-11-19 14:49:04,803 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:04,803 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1927819579] [2024-11-19 14:49:04,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:04,804 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:04,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:04,918 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:04,919 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:04,919 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1927819579] [2024-11-19 14:49:04,919 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1927819579] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:04,919 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:04,919 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:04,919 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [816652426] [2024-11-19 14:49:04,920 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:04,920 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:04,920 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:04,921 INFO L85 PathProgramCache]: Analyzing trace with hash -320049485, now seen corresponding path program 1 times [2024-11-19 14:49:04,921 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:04,921 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [821225438] [2024-11-19 14:49:04,921 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:04,921 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:04,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:04,962 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:04,963 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:04,963 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [821225438] [2024-11-19 14:49:04,963 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [821225438] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:04,963 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:04,963 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:04,963 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [146544632] [2024-11-19 14:49:04,964 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:04,964 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:04,964 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:04,964 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-19 14:49:04,965 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-19 14:49:04,965 INFO L87 Difference]: Start difference. First operand 7814 states and 14679 transitions. cyclomatic complexity: 6866 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:05,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:05,464 INFO L93 Difference]: Finished difference Result 7660 states and 14363 transitions. [2024-11-19 14:49:05,465 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 7660 states and 14363 transitions. [2024-11-19 14:49:05,510 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3797 [2024-11-19 14:49:05,561 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 7660 states to 7660 states and 14363 transitions. [2024-11-19 14:49:05,561 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 7660 [2024-11-19 14:49:05,571 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 7660 [2024-11-19 14:49:05,571 INFO L73 IsDeterministic]: Start isDeterministic. Operand 7660 states and 14363 transitions. [2024-11-19 14:49:05,584 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:05,584 INFO L218 hiAutomatonCegarLoop]: Abstraction has 7660 states and 14363 transitions. [2024-11-19 14:49:05,592 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7660 states and 14363 transitions. [2024-11-19 14:49:05,691 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7660 to 7660. [2024-11-19 14:49:05,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7660 states, 7660 states have (on average 1.875065274151436) internal successors, (14363), 7659 states have internal predecessors, (14363), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:05,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7660 states to 7660 states and 14363 transitions. [2024-11-19 14:49:05,725 INFO L240 hiAutomatonCegarLoop]: Abstraction has 7660 states and 14363 transitions. [2024-11-19 14:49:05,726 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-19 14:49:05,728 INFO L425 stractBuchiCegarLoop]: Abstraction has 7660 states and 14363 transitions. [2024-11-19 14:49:05,728 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-19 14:49:05,729 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7660 states and 14363 transitions. [2024-11-19 14:49:05,761 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3797 [2024-11-19 14:49:05,761 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:05,761 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:05,767 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:05,767 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:05,768 INFO L745 eck$LassoCheckResult]: Stem: 39510#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 39511#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 40592#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 40136#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 40137#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 39942#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 39943#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 41153#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 40386#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 39535#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 39536#L2208 assume 0 == initPersonOnFloor_~floor#1; 41397#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 39301#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 39815#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 40771#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 41250#L2000 assume !(0 == callOnFloor_~floorID#1); 41251#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 40112#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 42291#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 42290#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 42286#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 42283#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 42282#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 42251#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 42247#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 42245#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 42241#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 42240#L2000-2 assume !(0 == callOnFloor_~floorID#1); 42239#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 42235#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 42234#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 42233#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 42231#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 42232#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 43538#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 43536#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 43532#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 43530#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 43529#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 43527#L1034 assume !(0 != timeShift_~tmp___9~2#1); 43526#L1125 assume !(1 == ~doorState~0); 43512#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 43508#L476 assume !(1 == stopRequestedInDirection_~dir#1); 41909#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 41899#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 41896#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 41807#L852 assume !(1 == ~currentHeading~0); 41710#L862 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 41691#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 41681#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 41676#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 41670#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 41662#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 41661#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 41660#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 41638#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 41636#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 41635#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 41633#L1637-2 [2024-11-19 14:49:05,769 INFO L747 eck$LassoCheckResult]: Loop: 41633#L1637-2 assume !false; 41632#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 41631#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 41630#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 41629#L1645 assume 1 != cleanup_~tmp___0~6#1; 41628#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 41627#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 41622#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 41607#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 41603#L384 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 41592#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 41591#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 41590#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 41589#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 41588#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 41587#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 41577#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 41571#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 41567#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 41564#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 41560#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 41558#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 41557#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 41534#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 41519#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 41508#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 41506#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 41507#L852-3 assume !(1 == ~currentHeading~0); 42883#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 41849#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 41711#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 41692#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 41684#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 41677#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 41674#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 41668#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 41654#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 41637#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 41634#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 41633#L1637-2 [2024-11-19 14:49:05,769 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:05,769 INFO L85 PathProgramCache]: Analyzing trace with hash 398565134, now seen corresponding path program 2 times [2024-11-19 14:49:05,770 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:05,770 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [636454445] [2024-11-19 14:49:05,770 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-19 14:49:05,770 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:05,794 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:49:05,795 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:05,914 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:05,914 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:05,914 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [636454445] [2024-11-19 14:49:05,915 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [636454445] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:05,915 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:05,915 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:05,915 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [340550597] [2024-11-19 14:49:05,915 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:05,916 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:05,917 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:05,917 INFO L85 PathProgramCache]: Analyzing trace with hash 2025650078, now seen corresponding path program 1 times [2024-11-19 14:49:05,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:05,917 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [301591230] [2024-11-19 14:49:05,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:05,918 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:05,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:05,964 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:05,964 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:05,964 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [301591230] [2024-11-19 14:49:05,965 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [301591230] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:05,965 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:05,965 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:05,965 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [600870872] [2024-11-19 14:49:05,966 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:05,966 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:05,966 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:05,967 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:05,967 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:05,967 INFO L87 Difference]: Start difference. First operand 7660 states and 14363 transitions. cyclomatic complexity: 6704 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:06,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:06,139 INFO L93 Difference]: Finished difference Result 13903 states and 26055 transitions. [2024-11-19 14:49:06,139 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13903 states and 26055 transitions. [2024-11-19 14:49:06,204 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7532 [2024-11-19 14:49:06,263 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13903 states to 13903 states and 26055 transitions. [2024-11-19 14:49:06,264 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13903 [2024-11-19 14:49:06,283 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13903 [2024-11-19 14:49:06,283 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13903 states and 26055 transitions. [2024-11-19 14:49:06,300 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:06,301 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13903 states and 26055 transitions. [2024-11-19 14:49:06,315 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13903 states and 26055 transitions. [2024-11-19 14:49:06,470 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13903 to 13903. [2024-11-19 14:49:06,491 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13903 states, 13903 states have (on average 1.8740559591455082) internal successors, (26055), 13902 states have internal predecessors, (26055), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:06,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13903 states to 13903 states and 26055 transitions. [2024-11-19 14:49:06,524 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13903 states and 26055 transitions. [2024-11-19 14:49:06,525 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-19 14:49:06,526 INFO L425 stractBuchiCegarLoop]: Abstraction has 13903 states and 26055 transitions. [2024-11-19 14:49:06,526 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-19 14:49:06,526 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13903 states and 26055 transitions. [2024-11-19 14:49:06,633 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7532 [2024-11-19 14:49:06,634 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:06,634 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:06,638 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:06,638 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:06,638 INFO L745 eck$LassoCheckResult]: Stem: 61084#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 61085#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 62185#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 61719#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 61720#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 61528#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 61529#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 62764#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 61977#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 61111#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 61112#L2208 assume 0 == initPersonOnFloor_~floor#1; 63047#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 60875#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 61395#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 62365#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 62873#L2000 assume !(0 == callOnFloor_~floorID#1); 62875#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 61447#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 61448#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 61522#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 61126#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 60776#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 61456#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 61876#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 60962#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 60980#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 60981#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 61340#L2000-2 assume !(0 == callOnFloor_~floorID#1); 62045#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 64356#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 64355#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 64354#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 64353#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 64352#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 64351#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 64349#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 64314#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 64311#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 64307#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 64304#L1034 assume !(0 != timeShift_~tmp___9~2#1); 64303#L1125 assume !(1 == ~doorState~0); 64302#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 64300#L476 assume !(1 == stopRequestedInDirection_~dir#1); 63791#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 63785#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 63780#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 63777#L852 assume !(1 == ~currentHeading~0); 63775#L862 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 63771#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 63768#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 63764#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 63763#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 63762#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 63761#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 63758#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 63129#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 63115#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 63116#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 63635#L1637-2 [2024-11-19 14:49:06,639 INFO L747 eck$LassoCheckResult]: Loop: 63635#L1637-2 assume !false; 63634#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 63633#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 63632#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 63631#L1645 assume 1 != cleanup_~tmp___0~6#1; 63630#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 63629#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 63102#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 63103#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 63097#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 63099#L1932-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 63391#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 63389#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 63378#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 63377#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 63376#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 63374#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 63373#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 63372#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 63371#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 63366#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 63364#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 63359#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 63356#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 63355#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 63354#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 63352#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 63220#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 63206#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 63196#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 63188#L852-3 assume !(1 == ~currentHeading~0); 63179#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 63175#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 63170#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 63171#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 63919#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 63916#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 63917#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 63918#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 63123#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 63118#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 63636#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 63635#L1637-2 [2024-11-19 14:49:06,639 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:06,639 INFO L85 PathProgramCache]: Analyzing trace with hash 398565134, now seen corresponding path program 3 times [2024-11-19 14:49:06,640 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:06,640 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1003658199] [2024-11-19 14:49:06,640 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-11-19 14:49:06,640 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:06,666 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2024-11-19 14:49:06,667 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:06,712 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:06,713 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:06,713 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1003658199] [2024-11-19 14:49:06,713 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1003658199] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:06,714 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:06,714 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:06,714 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1148862737] [2024-11-19 14:49:06,715 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:06,715 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:06,715 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:06,715 INFO L85 PathProgramCache]: Analyzing trace with hash 96644810, now seen corresponding path program 1 times [2024-11-19 14:49:06,716 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:06,716 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [19734599] [2024-11-19 14:49:06,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:06,717 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:06,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:06,768 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:06,768 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:06,769 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [19734599] [2024-11-19 14:49:06,769 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [19734599] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:06,769 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:06,769 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:06,769 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [409870291] [2024-11-19 14:49:06,769 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:06,770 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:06,770 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:06,770 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:06,771 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:06,771 INFO L87 Difference]: Start difference. First operand 13903 states and 26055 transitions. cyclomatic complexity: 12153 Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:07,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:07,445 INFO L93 Difference]: Finished difference Result 13903 states and 25911 transitions. [2024-11-19 14:49:07,445 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13903 states and 25911 transitions. [2024-11-19 14:49:07,521 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7532 [2024-11-19 14:49:07,576 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13903 states to 13903 states and 25911 transitions. [2024-11-19 14:49:07,576 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13903 [2024-11-19 14:49:07,592 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13903 [2024-11-19 14:49:07,593 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13903 states and 25911 transitions. [2024-11-19 14:49:07,612 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:07,613 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13903 states and 25911 transitions. [2024-11-19 14:49:07,628 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13903 states and 25911 transitions. [2024-11-19 14:49:07,849 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13903 to 13903. [2024-11-19 14:49:07,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13903 states, 13903 states have (on average 1.8636984823419407) internal successors, (25911), 13902 states have internal predecessors, (25911), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:07,902 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13903 states to 13903 states and 25911 transitions. [2024-11-19 14:49:07,902 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13903 states and 25911 transitions. [2024-11-19 14:49:07,903 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-19 14:49:07,903 INFO L425 stractBuchiCegarLoop]: Abstraction has 13903 states and 25911 transitions. [2024-11-19 14:49:07,904 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-19 14:49:07,904 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13903 states and 25911 transitions. [2024-11-19 14:49:07,953 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7532 [2024-11-19 14:49:07,954 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:07,954 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:07,959 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:07,959 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:07,959 INFO L745 eck$LassoCheckResult]: Stem: 88897#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 88898#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 90013#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 89540#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 89541#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 89340#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 89341#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 90613#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 89802#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 88924#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 88925#L2208 assume 0 == initPersonOnFloor_~floor#1; 90897#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 88691#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 89208#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 90208#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 90718#L2000 assume !(0 == callOnFloor_~floorID#1); 90719#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 89519#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 92940#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 92939#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 92933#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 92930#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 89143#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 89144#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 91619#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 91617#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 91613#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 91612#L2000-2 assume !(0 == callOnFloor_~floorID#1); 91611#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 91607#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 91606#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 91605#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 91603#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 91602#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 91601#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 91599#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 91595#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 91589#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 91587#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 91585#L1034 assume !(0 != timeShift_~tmp___9~2#1); 91584#L1125 assume !(1 == ~doorState~0); 91582#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 91579#L476 assume !(1 == stopRequestedInDirection_~dir#1); 91533#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 91527#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 91524#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 91520#L852 assume !(1 == ~currentHeading~0); 91516#L862 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 91512#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 91511#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 91507#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 91506#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 91505#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 91503#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 91504#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 90983#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 90971#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 90968#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 90966#L1637-2 [2024-11-19 14:49:07,960 INFO L747 eck$LassoCheckResult]: Loop: 90966#L1637-2 assume !false; 90965#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 90964#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 90963#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 90962#L1645 assume 1 != cleanup_~tmp___0~6#1; 90961#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 90960#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 90959#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 90957#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 90955#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 90601#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 90602#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 90656#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 90657#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 91445#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 91444#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 91443#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 91434#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 91431#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 91428#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 91426#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 91416#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 91408#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 91398#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 91211#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 91210#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 91209#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 91207#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 91075#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 91061#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 91051#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 91043#L852-3 assume !(1 == ~currentHeading~0); 91034#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 91030#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 91025#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 91026#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 91011#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 91012#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 91665#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 91003#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 91004#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 91646#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 90967#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 90966#L1637-2 [2024-11-19 14:49:07,960 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:07,961 INFO L85 PathProgramCache]: Analyzing trace with hash 398565134, now seen corresponding path program 4 times [2024-11-19 14:49:07,961 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:07,961 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [14692651] [2024-11-19 14:49:07,961 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-11-19 14:49:07,961 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:07,976 INFO L227 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-11-19 14:49:07,977 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:07,997 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:07,998 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:07,998 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [14692651] [2024-11-19 14:49:07,998 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [14692651] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:07,998 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:07,998 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:07,999 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1392740468] [2024-11-19 14:49:07,999 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:07,999 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:07,999 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:07,999 INFO L85 PathProgramCache]: Analyzing trace with hash -1903728042, now seen corresponding path program 1 times [2024-11-19 14:49:08,000 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:08,000 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1243566091] [2024-11-19 14:49:08,000 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:08,000 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:08,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:08,036 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:08,037 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:08,037 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1243566091] [2024-11-19 14:49:08,037 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1243566091] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:08,037 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:08,037 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:08,037 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [290784367] [2024-11-19 14:49:08,037 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:08,038 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:08,038 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:08,038 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:08,038 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:08,038 INFO L87 Difference]: Start difference. First operand 13903 states and 25911 transitions. cyclomatic complexity: 12009 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:08,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:08,215 INFO L93 Difference]: Finished difference Result 13932 states and 25940 transitions. [2024-11-19 14:49:08,215 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13932 states and 25940 transitions. [2024-11-19 14:49:08,269 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7550 [2024-11-19 14:49:08,496 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13932 states to 13932 states and 25940 transitions. [2024-11-19 14:49:08,496 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13932 [2024-11-19 14:49:08,529 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13932 [2024-11-19 14:49:08,529 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13932 states and 25940 transitions. [2024-11-19 14:49:08,545 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:08,546 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13932 states and 25940 transitions. [2024-11-19 14:49:08,556 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13932 states and 25940 transitions. [2024-11-19 14:49:08,750 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13932 to 13921. [2024-11-19 14:49:08,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13921 states, 13921 states have (on average 1.8625817110839737) internal successors, (25929), 13920 states have internal predecessors, (25929), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:08,812 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13921 states to 13921 states and 25929 transitions. [2024-11-19 14:49:08,813 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13921 states and 25929 transitions. [2024-11-19 14:49:08,813 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:08,814 INFO L425 stractBuchiCegarLoop]: Abstraction has 13921 states and 25929 transitions. [2024-11-19 14:49:08,814 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-19 14:49:08,814 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13921 states and 25929 transitions. [2024-11-19 14:49:08,875 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7544 [2024-11-19 14:49:08,876 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:08,876 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:08,878 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:08,881 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:08,882 INFO L745 eck$LassoCheckResult]: Stem: 116739#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 116740#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 117860#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 117391#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 117392#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 117187#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 117188#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 118451#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 117651#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 116767#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 116768#L2208 assume 0 == initPersonOnFloor_~floor#1; 118748#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 116533#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 117055#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 118049#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 118557#L2000 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 117106#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 117107#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 117181#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 116783#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 116434#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 116991#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 116992#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 116618#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 116636#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 116637#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 116997#L2000-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 117296#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 117297#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 117625#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 116817#L1932 assume !(0 == isFloorCalling_~floorID#1); 116542#L1936 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 116543#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 116578#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 117052#L289 assume !(0 == buttonForFloorIsPressed_~floorID#1); 118725#L293 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 117100#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 117808#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 117809#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 128219#L1034 assume !(0 != timeShift_~tmp___9~2#1); 118487#L1125 assume !(1 == ~doorState~0); 116534#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 116535#L476 assume !(1 == stopRequestedInDirection_~dir#1); 118431#L645 assume !(0 == ~currentFloorID~0); 119423#L651 assume !(~currentFloorID~0 > 0); 118472#$Ultimate##2164 assume ~currentFloorID~0 > 0; 119417#L668 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 119416#L669 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 118540#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 128850#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 117666#L852 assume !(1 == ~currentHeading~0); 117668#L862 assume !(0 == ~currentFloorID~0); 129997#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 129996#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 118293#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 118055#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 118056#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 116806#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 116807#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 116678#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 116679#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 118691#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 116857#L1637-2 [2024-11-19 14:49:08,883 INFO L747 eck$LassoCheckResult]: Loop: 116857#L1637-2 assume !false; 116779#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 116780#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 117853#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 117854#L1645 assume 1 != cleanup_~tmp___0~6#1; 118169#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 118170#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 128970#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 127276#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 127270#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 127268#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 127267#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 127266#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 116584#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 116451#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 118119#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 129103#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 129108#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 129106#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 129104#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 129105#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 129283#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 129282#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 129280#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 129278#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 129279#L645-2 assume !(0 == ~currentFloorID~0); 130078#L651-2 assume !(~currentFloorID~0 > 0); 118800#$Ultimate##4524 assume ~currentFloorID~0 > 0; 130076#L668-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 118438#L669-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 116598#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 129240#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 129239#L852-3 assume !(1 == ~currentHeading~0); 116916#L862-9 assume !(0 == ~currentFloorID~0); 116917#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 118694#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 117983#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 117984#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 118059#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 118060#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 118760#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 118655#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 117401#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 118706#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 116857#L1637-2 [2024-11-19 14:49:08,883 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:08,883 INFO L85 PathProgramCache]: Analyzing trace with hash 995828991, now seen corresponding path program 1 times [2024-11-19 14:49:08,883 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:08,884 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [262853833] [2024-11-19 14:49:08,884 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:08,884 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:08,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:08,993 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:08,994 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:08,994 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [262853833] [2024-11-19 14:49:08,994 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [262853833] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:08,994 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:08,994 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:08,994 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [683309125] [2024-11-19 14:49:08,994 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:08,995 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:08,995 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:08,995 INFO L85 PathProgramCache]: Analyzing trace with hash -330281427, now seen corresponding path program 1 times [2024-11-19 14:49:08,995 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:08,995 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [687922061] [2024-11-19 14:49:08,995 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:08,996 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:09,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:09,243 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:09,244 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:09,244 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [687922061] [2024-11-19 14:49:09,244 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [687922061] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:09,244 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:09,245 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:09,245 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1765147002] [2024-11-19 14:49:09,245 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:09,245 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:09,245 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:09,246 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:09,246 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:09,246 INFO L87 Difference]: Start difference. First operand 13921 states and 25929 transitions. cyclomatic complexity: 12009 Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:10,191 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:10,191 INFO L93 Difference]: Finished difference Result 20737 states and 38348 transitions. [2024-11-19 14:49:10,192 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20737 states and 38348 transitions. [2024-11-19 14:49:10,276 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11270 [2024-11-19 14:49:10,358 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20737 states to 20737 states and 38348 transitions. [2024-11-19 14:49:10,359 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20737 [2024-11-19 14:49:10,383 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20737 [2024-11-19 14:49:10,384 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20737 states and 38348 transitions. [2024-11-19 14:49:10,410 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:10,410 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20737 states and 38348 transitions. [2024-11-19 14:49:10,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20737 states and 38348 transitions. [2024-11-19 14:49:10,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20737 to 20565. [2024-11-19 14:49:10,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20565 states, 20565 states have (on average 1.851300753707756) internal successors, (38072), 20564 states have internal predecessors, (38072), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:10,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20565 states to 20565 states and 38072 transitions. [2024-11-19 14:49:10,850 INFO L240 hiAutomatonCegarLoop]: Abstraction has 20565 states and 38072 transitions. [2024-11-19 14:49:10,850 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:10,853 INFO L425 stractBuchiCegarLoop]: Abstraction has 20565 states and 38072 transitions. [2024-11-19 14:49:10,853 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-19 14:49:10,853 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20565 states and 38072 transitions. [2024-11-19 14:49:10,911 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11184 [2024-11-19 14:49:10,911 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:10,911 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:10,917 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:10,917 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:10,917 INFO L745 eck$LassoCheckResult]: Stem: 151401#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 151402#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 152529#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 152057#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 152058#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 151850#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 151851#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 153143#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 152318#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 151425#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 151426#L2208 assume 0 == initPersonOnFloor_~floor#1; 153467#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 151196#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 151715#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 152722#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 153259#L2000 assume !(0 == callOnFloor_~floorID#1); 153261#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 151765#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 151766#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 151843#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 151844#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 151777#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 151778#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 152216#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 151282#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 151302#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 151303#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 152384#L2000-2 assume !(0 == callOnFloor_~floorID#1); 152385#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 151957#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 151958#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 152290#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 152291#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 153576#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 153574#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 153570#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 153571#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 158015#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 158014#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 158011#L1034 assume !(0 != timeShift_~tmp___9~2#1); 158012#L1125 assume !(1 == ~doorState~0); 166935#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 166933#L476 assume !(1 == stopRequestedInDirection_~dir#1); 166934#L645 assume !(0 == ~currentFloorID~0); 168168#L651 assume !(~currentFloorID~0 > 0); 153531#$Ultimate##2164 assume ~currentFloorID~0 > 0; 153530#L668 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 153529#L669 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 153240#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 169499#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 152330#L852 assume !(1 == ~currentHeading~0); 152331#L862 assume !(0 == ~currentFloorID~0); 152312#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 152603#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 152604#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 169245#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 169244#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 169242#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 169243#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 169413#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 169172#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 169173#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 169164#L1637-2 [2024-11-19 14:49:10,918 INFO L747 eck$LassoCheckResult]: Loop: 169164#L1637-2 assume !false; 169165#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 169157#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 169158#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 169153#L1645 assume 1 != cleanup_~tmp___0~6#1; 169154#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 159241#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 159242#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 169998#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 169999#L384 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 153821#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 170767#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 170766#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 170765#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 169953#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 169508#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 169509#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 169514#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 169904#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 169511#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 169512#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 170171#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 170166#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 170165#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 170163#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 170164#L645-2 assume !(0 == ~currentFloorID~0); 169983#L651-2 assume !(~currentFloorID~0 > 0); 169979#$Ultimate##4524 assume ~currentFloorID~0 > 0; 169978#L668-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 153129#L669-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 151260#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 170181#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 170176#L852-3 assume !(1 == ~currentHeading~0); 170110#L862-9 assume !(0 == ~currentFloorID~0); 153426#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 153411#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 152662#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 169439#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 169437#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 169438#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 169435#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 169436#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 169414#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 169415#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 169164#L1637-2 [2024-11-19 14:49:10,918 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:10,918 INFO L85 PathProgramCache]: Analyzing trace with hash -1743768199, now seen corresponding path program 1 times [2024-11-19 14:49:10,918 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:10,918 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1946080999] [2024-11-19 14:49:10,919 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:10,919 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:10,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:10,982 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:10,982 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:10,982 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1946080999] [2024-11-19 14:49:10,983 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1946080999] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:10,983 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:10,983 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:10,983 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1097459516] [2024-11-19 14:49:10,983 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:10,984 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:10,984 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:10,984 INFO L85 PathProgramCache]: Analyzing trace with hash -1020688528, now seen corresponding path program 1 times [2024-11-19 14:49:10,984 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:10,984 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1964042728] [2024-11-19 14:49:10,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:10,985 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:11,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:11,174 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:11,174 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:11,174 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1964042728] [2024-11-19 14:49:11,175 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1964042728] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:11,178 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:11,178 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:11,178 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [580444396] [2024-11-19 14:49:11,178 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:11,179 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:11,179 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:11,179 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:11,179 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:11,179 INFO L87 Difference]: Start difference. First operand 20565 states and 38072 transitions. cyclomatic complexity: 17508 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:11,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:11,931 INFO L93 Difference]: Finished difference Result 14200 states and 26169 transitions. [2024-11-19 14:49:11,931 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14200 states and 26169 transitions. [2024-11-19 14:49:11,979 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11237 [2024-11-19 14:49:12,029 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14200 states to 14200 states and 26169 transitions. [2024-11-19 14:49:12,029 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14200 [2024-11-19 14:49:12,044 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14200 [2024-11-19 14:49:12,045 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14200 states and 26169 transitions. [2024-11-19 14:49:12,065 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:12,066 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14200 states and 26169 transitions. [2024-11-19 14:49:12,076 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14200 states and 26169 transitions. [2024-11-19 14:49:12,358 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14200 to 14191. [2024-11-19 14:49:12,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14191 states, 14191 states have (on average 1.8429990839264323) internal successors, (26154), 14190 states have internal predecessors, (26154), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:12,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14191 states to 14191 states and 26154 transitions. [2024-11-19 14:49:12,424 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14191 states and 26154 transitions. [2024-11-19 14:49:12,425 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-19 14:49:12,426 INFO L425 stractBuchiCegarLoop]: Abstraction has 14191 states and 26154 transitions. [2024-11-19 14:49:12,426 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-19 14:49:12,426 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14191 states and 26154 transitions. [2024-11-19 14:49:12,486 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11228 [2024-11-19 14:49:12,486 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:12,486 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:12,488 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:12,488 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:12,489 INFO L745 eck$LassoCheckResult]: Stem: 186152#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 186153#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 187189#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 186745#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 186746#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 186567#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 186568#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 187767#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 186987#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 186176#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 186177#L2208 assume 0 == initPersonOnFloor_~floor#1; 188034#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 185963#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 186451#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 187374#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 187867#L2000 assume !(0 == callOnFloor_~floorID#1); 187868#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 186727#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 188145#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 188144#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 188138#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 188135#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 188133#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 188105#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 188101#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 188099#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 188095#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 188094#L2000-2 assume !(0 == callOnFloor_~floorID#1); 188093#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 188089#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 188088#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 188087#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 188086#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 188085#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 188084#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 188073#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 187317#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 187137#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 187139#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 188082#L1034 assume !(0 != timeShift_~tmp___9~2#1); 187801#L1125 assume !(1 == ~doorState~0); 185964#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 185965#L476 assume !(1 == stopRequestedInDirection_~dir#1); 187743#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 187234#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 186062#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 186063#L907 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 187585#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 187528#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 186055#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 186056#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 187578#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 186210#L852-2 assume !(1 == ~currentHeading~0); 186211#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 186311#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 187091#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 187266#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 187381#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 187382#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 186216#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 186217#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 186093#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 186094#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 187216#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 187991#L1637-2 [2024-11-19 14:49:12,489 INFO L747 eck$LassoCheckResult]: Loop: 187991#L1637-2 assume !false; 196268#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 196265#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 196262#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 196259#L1645 assume 1 != cleanup_~tmp___0~6#1; 196251#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 196252#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 196243#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 196244#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 196250#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 197519#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 197517#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 197514#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 197513#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 197502#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 197501#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 197500#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 197495#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 186003#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 197493#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 197492#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 197491#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 197489#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 197488#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 197487#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 197482#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 197480#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 197478#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 197479#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 197448#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 197601#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 197433#L907-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 197595#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 197594#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 196711#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 196699#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 196697#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 196695#L852-5 assume !(1 == ~currentHeading~0); 196689#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 196614#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 196608#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 196605#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 196604#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 196390#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 196391#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 196384#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 196294#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 196276#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 196273#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 187991#L1637-2 [2024-11-19 14:49:12,490 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:12,491 INFO L85 PathProgramCache]: Analyzing trace with hash -2087993221, now seen corresponding path program 1 times [2024-11-19 14:49:12,491 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:12,491 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1436081197] [2024-11-19 14:49:12,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:12,491 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:12,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:12,570 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:12,571 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:12,572 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1436081197] [2024-11-19 14:49:12,572 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1436081197] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:12,572 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:12,572 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:12,572 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1031051282] [2024-11-19 14:49:12,572 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:12,573 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:12,573 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:12,573 INFO L85 PathProgramCache]: Analyzing trace with hash 177114241, now seen corresponding path program 1 times [2024-11-19 14:49:12,573 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:12,573 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1849237589] [2024-11-19 14:49:12,573 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:12,574 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:12,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:12,637 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:12,638 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:12,638 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1849237589] [2024-11-19 14:49:12,638 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1849237589] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:12,638 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:12,638 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:12,639 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1238938185] [2024-11-19 14:49:12,639 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:12,639 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:12,639 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:12,640 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:12,640 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:12,640 INFO L87 Difference]: Start difference. First operand 14191 states and 26154 transitions. cyclomatic complexity: 11964 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:12,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:12,775 INFO L93 Difference]: Finished difference Result 14217 states and 26180 transitions. [2024-11-19 14:49:12,775 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14217 states and 26180 transitions. [2024-11-19 14:49:12,860 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11251 [2024-11-19 14:49:12,919 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14217 states to 14217 states and 26180 transitions. [2024-11-19 14:49:12,919 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14217 [2024-11-19 14:49:12,935 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14217 [2024-11-19 14:49:12,935 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14217 states and 26180 transitions. [2024-11-19 14:49:12,959 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:12,959 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14217 states and 26180 transitions. [2024-11-19 14:49:12,970 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14217 states and 26180 transitions. [2024-11-19 14:49:13,276 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14217 to 14211. [2024-11-19 14:49:13,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14211 states, 14211 states have (on average 1.8418126803180634) internal successors, (26174), 14210 states have internal predecessors, (26174), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:13,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14211 states to 14211 states and 26174 transitions. [2024-11-19 14:49:13,326 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14211 states and 26174 transitions. [2024-11-19 14:49:13,326 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:13,327 INFO L425 stractBuchiCegarLoop]: Abstraction has 14211 states and 26174 transitions. [2024-11-19 14:49:13,327 INFO L332 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-11-19 14:49:13,328 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14211 states and 26174 transitions. [2024-11-19 14:49:13,378 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11246 [2024-11-19 14:49:13,378 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:13,378 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:13,380 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:13,380 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:13,380 INFO L745 eck$LassoCheckResult]: Stem: 214570#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 214571#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 215585#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 215152#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 215153#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 214974#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 214975#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 216147#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 215392#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 214595#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 214596#L2208 assume 0 == initPersonOnFloor_~floor#1; 216406#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 214381#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 214861#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 215768#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 216248#L2000 assume !(0 == callOnFloor_~floorID#1); 216250#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 214903#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 214904#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 216511#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 216507#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 216504#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 216500#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 216472#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 216468#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 216466#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 216462#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 216461#L2000-2 assume !(0 == callOnFloor_~floorID#1); 216460#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 216456#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 216455#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 216454#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 216453#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 216452#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 216451#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 216440#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 215714#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 215536#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 215537#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 216449#L1034 assume !(0 != timeShift_~tmp___9~2#1); 216179#L1125 assume !(1 == ~doorState~0); 214382#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 214383#L476 assume !(1 == stopRequestedInDirection_~dir#1); 216123#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 215631#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 214480#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 214481#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 216443#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 216450#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 214473#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 214474#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 215966#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 214628#L852-2 assume !(1 == ~currentHeading~0); 214629#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 214725#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 215493#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 215663#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 222584#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 222583#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 222575#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 216820#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 216712#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 216700#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 216698#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 216696#L1637-2 [2024-11-19 14:49:13,381 INFO L747 eck$LassoCheckResult]: Loop: 216696#L1637-2 assume !false; 216695#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 216694#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 216693#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 216692#L1645 assume 1 != cleanup_~tmp___0~6#1; 216691#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 216690#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 216689#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 216687#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 216685#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 216683#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 216684#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 216664#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 216665#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 217057#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 217056#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 217055#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 217054#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 216645#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 216640#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 216628#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 216627#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 216625#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 216624#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 216622#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 216621#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 216620#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 216604#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 216591#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 216581#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 216568#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 216566#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 216565#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 216546#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 216537#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 216518#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 216516#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 216514#L852-5 assume !(1 == ~currentHeading~0); 216512#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 216513#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 216737#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 216733#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 216731#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 216729#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 216728#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 216727#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 216706#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 216699#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 216697#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 216696#L1637-2 [2024-11-19 14:49:13,381 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:13,381 INFO L85 PathProgramCache]: Analyzing trace with hash 212829369, now seen corresponding path program 1 times [2024-11-19 14:49:13,381 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:13,382 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1253565928] [2024-11-19 14:49:13,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:13,382 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:13,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:13,454 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:13,454 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:13,454 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1253565928] [2024-11-19 14:49:13,454 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1253565928] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:13,454 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:13,454 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:13,455 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1560495328] [2024-11-19 14:49:13,455 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:13,455 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:13,455 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:13,455 INFO L85 PathProgramCache]: Analyzing trace with hash -1817030465, now seen corresponding path program 1 times [2024-11-19 14:49:13,455 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:13,455 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [366579660] [2024-11-19 14:49:13,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:13,456 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:13,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:13,571 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:13,571 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:13,571 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [366579660] [2024-11-19 14:49:13,572 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [366579660] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:13,572 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:13,572 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:13,572 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1128891089] [2024-11-19 14:49:13,572 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:13,572 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:13,572 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:13,573 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-19 14:49:13,573 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2024-11-19 14:49:13,573 INFO L87 Difference]: Start difference. First operand 14211 states and 26174 transitions. cyclomatic complexity: 11964 Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:14,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:14,636 INFO L93 Difference]: Finished difference Result 21293 states and 39263 transitions. [2024-11-19 14:49:14,636 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21293 states and 39263 transitions. [2024-11-19 14:49:14,715 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 18310 [2024-11-19 14:49:14,765 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21293 states to 21293 states and 39263 transitions. [2024-11-19 14:49:14,765 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21293 [2024-11-19 14:49:14,783 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21293 [2024-11-19 14:49:14,784 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21293 states and 39263 transitions. [2024-11-19 14:49:14,798 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:14,798 INFO L218 hiAutomatonCegarLoop]: Abstraction has 21293 states and 39263 transitions. [2024-11-19 14:49:14,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21293 states and 39263 transitions. [2024-11-19 14:49:15,124 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21293 to 20472. [2024-11-19 14:49:15,146 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20472 states, 20472 states have (on average 1.8509183274716685) internal successors, (37892), 20471 states have internal predecessors, (37892), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:15,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20472 states to 20472 states and 37892 transitions. [2024-11-19 14:49:15,187 INFO L240 hiAutomatonCegarLoop]: Abstraction has 20472 states and 37892 transitions. [2024-11-19 14:49:15,188 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-11-19 14:49:15,188 INFO L425 stractBuchiCegarLoop]: Abstraction has 20472 states and 37892 transitions. [2024-11-19 14:49:15,188 INFO L332 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-11-19 14:49:15,188 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20472 states and 37892 transitions. [2024-11-19 14:49:15,240 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17510 [2024-11-19 14:49:15,241 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:15,241 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:15,244 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:15,244 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:15,244 INFO L745 eck$LassoCheckResult]: Stem: 250095#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 250096#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 251128#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 250685#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 250686#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 250504#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 250505#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 251713#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 250925#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 250117#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 250118#L2208 assume 0 == initPersonOnFloor_~floor#1; 251994#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 249902#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 250388#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 251310#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 251815#L2000 assume !(0 == callOnFloor_~floorID#1); 251816#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 250664#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 252112#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 252111#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 252107#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 252104#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 252100#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 252072#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 252068#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 252066#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 252062#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 252061#L2000-2 assume !(0 == callOnFloor_~floorID#1); 252060#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 252056#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 252055#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 252054#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 252053#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 252052#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 252051#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 252031#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 251254#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 251076#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 251077#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 252049#L1034 assume !(0 != timeShift_~tmp___9~2#1); 251746#L1125 assume !(1 == ~doorState~0); 249903#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 249904#L476 assume !(1 == stopRequestedInDirection_~dir#1); 251688#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 251169#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 250003#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 250004#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 252033#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 252050#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 249997#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 249998#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 251518#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 250150#L852-2 assume !(1 == ~currentHeading~0); 250151#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 250248#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 251029#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 251201#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 251316#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 251317#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 251569#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 258686#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 258690#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 258691#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 258610#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 258598#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 258596#L1637-2 [2024-11-19 14:49:15,245 INFO L747 eck$LassoCheckResult]: Loop: 258596#L1637-2 assume !false; 258595#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 258594#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 258593#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 258592#L1645 assume 1 != cleanup_~tmp___0~6#1; 258591#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 258590#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 258585#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 258583#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 258524#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 258508#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 258500#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 258442#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 252262#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 252263#L1940-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 260273#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 260272#L885-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 260265#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 260260#L1034-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 260205#L1036-2 assume !(0 != ~persons_0~0); 260190#L1036-3 assume !(0 != ~persons_1~0); 259941#L1050-1 assume !(0 != ~persons_2~0); 259930#L1064-1 assume !(0 != ~persons_3~0); 259906#L1078-1 assume !(0 != ~persons_4~0); 259904#L1092-1 assume !(0 != ~persons_5~0); 259900#L1106-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~5#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 259893#L2028-12 assume 0 == isPersonOnFloor_~floor#1; 259856#L2029-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 259845#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret24#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret24#1;havoc processWaitingOnFloor_#t~ret24#1; 259839#L935-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 259836#L935-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 259834#L2028-14 assume 0 == isPersonOnFloor_~floor#1; 259681#L2029-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 259527#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret26#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret26#1;havoc processWaitingOnFloor_#t~ret26#1; 259184#L948-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 259181#L948-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 259175#L2028-16 assume 0 == isPersonOnFloor_~floor#1; 259165#L2029-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 259112#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret28#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret28#1;havoc processWaitingOnFloor_#t~ret28#1; 259109#L961-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 259105#L961-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 259104#L2028-18 assume 0 == isPersonOnFloor_~floor#1; 259076#L2029-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 259059#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret30#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret30#1;havoc processWaitingOnFloor_#t~ret30#1; 259057#L974-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 259055#L974-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 259054#L2028-20 assume 0 == isPersonOnFloor_~floor#1; 259017#L2029-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 259016#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret32#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret32#1;havoc processWaitingOnFloor_#t~ret32#1; 259014#L987-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 259015#L987-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 259511#L2028-22 assume 0 == isPersonOnFloor_~floor#1; 259436#L2029-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 259413#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 259411#L1000-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 259412#L1000-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 263353#L1967-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 250841#L1979-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 250885#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 250886#L243-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 251586#L255-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 251244#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 251245#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 251320#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 251321#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 251153#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 251154#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 250691#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 250692#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 258597#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 258596#L1637-2 [2024-11-19 14:49:15,246 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:15,246 INFO L85 PathProgramCache]: Analyzing trace with hash 316822787, now seen corresponding path program 1 times [2024-11-19 14:49:15,246 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:15,246 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1495783271] [2024-11-19 14:49:15,246 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:15,246 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:15,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:15,304 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:15,305 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:15,305 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1495783271] [2024-11-19 14:49:15,305 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1495783271] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:15,305 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:15,305 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:15,305 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [528311409] [2024-11-19 14:49:15,305 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:15,306 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:15,306 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:15,306 INFO L85 PathProgramCache]: Analyzing trace with hash -5900719, now seen corresponding path program 1 times [2024-11-19 14:49:15,306 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:15,306 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1978318685] [2024-11-19 14:49:15,307 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:15,307 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:15,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:15,365 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:15,366 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:15,366 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1978318685] [2024-11-19 14:49:15,366 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1978318685] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:15,366 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:15,366 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:15,367 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [82606230] [2024-11-19 14:49:15,367 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:15,367 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:15,367 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:15,367 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-19 14:49:15,368 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-19 14:49:15,368 INFO L87 Difference]: Start difference. First operand 20472 states and 37892 transitions. cyclomatic complexity: 17421 Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:15,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:15,466 INFO L93 Difference]: Finished difference Result 20472 states and 37886 transitions. [2024-11-19 14:49:15,466 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20472 states and 37886 transitions. [2024-11-19 14:49:15,755 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17510 [2024-11-19 14:49:15,827 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20472 states to 20472 states and 37886 transitions. [2024-11-19 14:49:15,827 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20472 [2024-11-19 14:49:15,848 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20472 [2024-11-19 14:49:15,848 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20472 states and 37886 transitions. [2024-11-19 14:49:15,869 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:15,869 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20472 states and 37886 transitions. [2024-11-19 14:49:15,884 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20472 states and 37886 transitions. [2024-11-19 14:49:16,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20472 to 20472. [2024-11-19 14:49:16,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20472 states, 20472 states have (on average 1.8506252442360298) internal successors, (37886), 20471 states have internal predecessors, (37886), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:16,164 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20472 states to 20472 states and 37886 transitions. [2024-11-19 14:49:16,164 INFO L240 hiAutomatonCegarLoop]: Abstraction has 20472 states and 37886 transitions. [2024-11-19 14:49:16,165 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-19 14:49:16,165 INFO L425 stractBuchiCegarLoop]: Abstraction has 20472 states and 37886 transitions. [2024-11-19 14:49:16,165 INFO L332 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2024-11-19 14:49:16,165 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20472 states and 37886 transitions. [2024-11-19 14:49:16,354 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17510 [2024-11-19 14:49:16,354 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:16,354 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:16,357 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:16,357 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:16,357 INFO L745 eck$LassoCheckResult]: Stem: 291045#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 291046#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 292071#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 291631#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 291632#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 291452#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 291453#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 292636#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 291877#L3030 assume !(0 == getOrigin_~person#1); 291878#L3034 assume !(1 == getOrigin_~person#1); 292039#L3038 assume !(2 == getOrigin_~person#1); 291514#L3042 assume !(3 == getOrigin_~person#1); 291515#L3046 assume !(4 == getOrigin_~person#1); 292437#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 291069#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 291070#L2208 assume 0 == initPersonOnFloor_~floor#1; 292899#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 290855#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 291336#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 292245#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 292735#L2000 assume !(0 == callOnFloor_~floorID#1); 292736#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 291612#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 293011#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 293010#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 293006#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 293003#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 292999#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 292971#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 292967#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 292965#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 292961#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 292960#L2000-2 assume !(0 == callOnFloor_~floorID#1); 292959#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 292955#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 292954#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 292953#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 292952#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 292951#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 292950#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 292940#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 292194#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 292022#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 292024#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 292947#L1034 assume !(0 != timeShift_~tmp___9~2#1); 292668#L1125 assume !(1 == ~doorState~0); 290856#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 290857#L476 assume !(1 == stopRequestedInDirection_~dir#1); 292614#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 292113#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 290954#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 290955#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 292942#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 292949#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 290947#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 290948#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 292449#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 291102#L852-2 assume !(1 == ~currentHeading~0); 291103#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 291199#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 291979#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 292145#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 292252#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 292253#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 292499#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 299314#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 299319#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 299317#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 299292#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 299288#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 299284#L1637-2 [2024-11-19 14:49:16,358 INFO L747 eck$LassoCheckResult]: Loop: 299284#L1637-2 assume !false; 299281#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 299278#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 299275#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 299271#L1645 assume 1 != cleanup_~tmp___0~6#1; 299268#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 299261#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 299260#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 299259#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 298200#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 298199#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 298197#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 298195#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 293244#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 293245#L1940-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 306077#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 306076#L885-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 306057#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 302081#L1034-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 302074#L1036-2 assume !(0 != ~persons_0~0); 302068#L1036-3 assume !(0 != ~persons_1~0); 302063#L1050-1 assume !(0 != ~persons_2~0); 302052#L1064-1 assume !(0 != ~persons_3~0); 302028#L1078-1 assume !(0 != ~persons_4~0); 302026#L1092-1 assume !(0 != ~persons_5~0); 302022#L1106-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~5#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 302021#L2028-12 assume 0 == isPersonOnFloor_~floor#1; 301996#L2029-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 301979#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret24#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret24#1;havoc processWaitingOnFloor_#t~ret24#1; 301977#L935-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 301975#L935-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 301974#L2028-14 assume 0 == isPersonOnFloor_~floor#1; 300366#L2029-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 300364#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret26#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret26#1;havoc processWaitingOnFloor_#t~ret26#1; 300359#L948-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 300356#L948-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 300355#L2028-16 assume 0 == isPersonOnFloor_~floor#1; 300102#L2029-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 300074#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret28#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret28#1;havoc processWaitingOnFloor_#t~ret28#1; 300072#L961-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 300070#L961-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 300069#L2028-18 assume 0 == isPersonOnFloor_~floor#1; 300046#L2029-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 300035#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret30#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret30#1;havoc processWaitingOnFloor_#t~ret30#1; 300033#L974-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 300034#L974-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 300309#L2028-20 assume 0 == isPersonOnFloor_~floor#1; 300274#L2029-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 300273#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret32#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret32#1;havoc processWaitingOnFloor_#t~ret32#1; 300269#L987-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 300267#L987-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 300266#L2028-22 assume 0 == isPersonOnFloor_~floor#1; 299661#L2029-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 299637#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 299634#L1000-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 299631#L1000-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 299488#L1967-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 299484#L1979-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 299482#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 299373#L243-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 299368#L255-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 299364#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 299363#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 299362#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 299352#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 299350#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 299351#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 299309#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 299291#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 299287#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 299284#L1637-2 [2024-11-19 14:49:16,358 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:16,358 INFO L85 PathProgramCache]: Analyzing trace with hash 1653362834, now seen corresponding path program 1 times [2024-11-19 14:49:16,358 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:16,359 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1498944831] [2024-11-19 14:49:16,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:16,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:16,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:16,473 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:16,474 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:16,474 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1498944831] [2024-11-19 14:49:16,474 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1498944831] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:16,474 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:16,474 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-19 14:49:16,474 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1063277650] [2024-11-19 14:49:16,474 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:16,475 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:16,476 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:16,476 INFO L85 PathProgramCache]: Analyzing trace with hash -496028017, now seen corresponding path program 1 times [2024-11-19 14:49:16,476 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:16,476 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [682335609] [2024-11-19 14:49:16,476 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:16,476 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:16,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:16,552 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:16,553 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:16,553 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [682335609] [2024-11-19 14:49:16,553 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [682335609] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:16,553 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:16,553 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:16,554 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [760966187] [2024-11-19 14:49:16,554 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:16,554 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:16,554 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:16,554 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:16,555 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:16,555 INFO L87 Difference]: Start difference. First operand 20472 states and 37886 transitions. cyclomatic complexity: 17415 Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:17,483 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:17,483 INFO L93 Difference]: Finished difference Result 20451 states and 37791 transitions. [2024-11-19 14:49:17,483 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20451 states and 37791 transitions. [2024-11-19 14:49:17,650 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17489 [2024-11-19 14:49:17,695 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20451 states to 20451 states and 37791 transitions. [2024-11-19 14:49:17,695 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20451 [2024-11-19 14:49:17,712 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20451 [2024-11-19 14:49:17,712 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20451 states and 37791 transitions. [2024-11-19 14:49:17,730 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:17,730 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20451 states and 37791 transitions. [2024-11-19 14:49:17,745 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20451 states and 37791 transitions. [2024-11-19 14:49:17,892 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20451 to 20376. [2024-11-19 14:49:17,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20376 states, 20376 states have (on average 1.8491362387122103) internal successors, (37678), 20375 states have internal predecessors, (37678), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:17,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20376 states to 20376 states and 37678 transitions. [2024-11-19 14:49:17,941 INFO L240 hiAutomatonCegarLoop]: Abstraction has 20376 states and 37678 transitions. [2024-11-19 14:49:17,942 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-19 14:49:17,942 INFO L425 stractBuchiCegarLoop]: Abstraction has 20376 states and 37678 transitions. [2024-11-19 14:49:17,942 INFO L332 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2024-11-19 14:49:17,942 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20376 states and 37678 transitions. [2024-11-19 14:49:17,995 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17414 [2024-11-19 14:49:17,995 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:17,995 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:17,999 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:17,999 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:17,999 INFO L745 eck$LassoCheckResult]: Stem: 331981#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 331982#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 333024#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 332579#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 332580#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 332398#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 332399#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 333589#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 332828#L3030 assume !(0 == getOrigin_~person#1); 332829#L3034 assume !(1 == getOrigin_~person#1); 332988#L3038 assume !(2 == getOrigin_~person#1); 332461#L3042 assume !(3 == getOrigin_~person#1); 332462#L3046 assume !(4 == getOrigin_~person#1); 333396#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 332006#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 332007#L2208 assume 0 == initPersonOnFloor_~floor#1; 333859#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 331794#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 332282#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 333208#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 333684#L2000 assume !(0 == callOnFloor_~floorID#1); 333685#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 332560#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 333979#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 333978#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 333974#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 333971#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 333967#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 333939#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 333935#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 333933#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 333929#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 333928#L2000-2 assume !(0 == callOnFloor_~floorID#1); 333927#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 333923#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 333922#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 333921#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 333920#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 333919#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 333918#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 333896#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 333151#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 332974#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 332975#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 333916#L1034 assume !(0 != timeShift_~tmp___9~2#1); 333622#L1125 assume !(1 == ~doorState~0); 331795#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 331796#L476 assume !(1 == stopRequestedInDirection_~dir#1); 333568#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 333068#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 331893#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 331894#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 333898#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 333917#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 331889#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 331890#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 333408#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 332040#L852-2 assume !(1 == ~currentHeading~0); 332041#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 332141#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 332930#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 333101#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 333214#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 333215#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 333455#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 333575#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 349803#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 349802#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 333049#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 333050#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 332099#L1637-2 [2024-11-19 14:49:17,999 INFO L747 eck$LassoCheckResult]: Loop: 332099#L1637-2 assume !false; 332018#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 332019#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 333015#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 333016#L1645 assume 1 != cleanup_~tmp___0~6#1; 333321#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 332619#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 332620#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 333507#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 332086#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 349410#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 349409#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 337130#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 337127#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 337128#L1940-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 349396#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 349391#L885-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 349369#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 350977#L1034-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 337055#L1036-2 assume !(0 != ~persons_0~0); 350966#L1036-3 assume !(0 != ~persons_1~0); 350960#L1050-1 assume !(0 != ~persons_2~0); 350954#L1064-1 assume !(0 != ~persons_3~0); 350930#L1078-1 assume !(0 != ~persons_4~0); 350928#L1092-1 assume !(0 != ~persons_5~0); 350924#L1106-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~5#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 350923#L2028-12 assume !(0 == isPersonOnFloor_~floor#1); 350922#L2061-12 assume 1 == isPersonOnFloor_~floor#1; 350916#L2062-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 350893#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret24#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret24#1;havoc processWaitingOnFloor_#t~ret24#1; 350891#L935-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 350892#L935-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 351105#L2028-14 assume 0 == isPersonOnFloor_~floor#1; 351074#L2029-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 351073#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret26#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret26#1;havoc processWaitingOnFloor_#t~ret26#1; 351071#L948-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 351072#L948-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 351262#L2028-16 assume 0 == isPersonOnFloor_~floor#1; 351252#L2029-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 351230#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret28#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret28#1;havoc processWaitingOnFloor_#t~ret28#1; 351228#L961-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 351229#L961-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 350525#L2028-18 assume 0 == isPersonOnFloor_~floor#1; 350164#L2029-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 350153#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret30#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret30#1;havoc processWaitingOnFloor_#t~ret30#1; 350149#L974-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 350147#L974-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 350145#L2028-20 assume 0 == isPersonOnFloor_~floor#1; 350014#L2029-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 350007#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret32#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret32#1;havoc processWaitingOnFloor_#t~ret32#1; 350005#L987-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 350003#L987-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 350002#L2028-22 assume 0 == isPersonOnFloor_~floor#1; 349986#L2029-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 349900#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 349885#L1000-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 349880#L1000-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 349877#L1967-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 349878#L1979-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 332782#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 332411#L243-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 331954#L255-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 333144#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 333145#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 333217#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 333218#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 333524#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 332217#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 332218#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 332587#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 333825#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 332099#L1637-2 [2024-11-19 14:49:18,000 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:18,000 INFO L85 PathProgramCache]: Analyzing trace with hash 1653362834, now seen corresponding path program 2 times [2024-11-19 14:49:18,000 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:18,000 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1330423109] [2024-11-19 14:49:18,000 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-19 14:49:18,000 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:18,110 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:49:18,110 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:18,198 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:18,198 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:18,198 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1330423109] [2024-11-19 14:49:18,198 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1330423109] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:18,199 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:18,199 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-19 14:49:18,199 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [814317831] [2024-11-19 14:49:18,199 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:18,199 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:18,201 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:18,202 INFO L85 PathProgramCache]: Analyzing trace with hash 1799176055, now seen corresponding path program 1 times [2024-11-19 14:49:18,202 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:18,202 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [435902309] [2024-11-19 14:49:18,202 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:18,202 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:18,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:18,264 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:18,264 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:18,265 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [435902309] [2024-11-19 14:49:18,265 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [435902309] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:18,266 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:18,266 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:18,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1249616446] [2024-11-19 14:49:18,266 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:18,266 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:18,267 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:18,267 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-19 14:49:18,267 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-19 14:49:18,268 INFO L87 Difference]: Start difference. First operand 20376 states and 37678 transitions. cyclomatic complexity: 17303 Second operand has 6 states, 6 states have (on average 11.666666666666666) internal successors, (70), 6 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:18,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:18,427 INFO L93 Difference]: Finished difference Result 20376 states and 37671 transitions. [2024-11-19 14:49:18,427 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20376 states and 37671 transitions. [2024-11-19 14:49:18,524 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17414 [2024-11-19 14:49:18,592 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20376 states to 20376 states and 37671 transitions. [2024-11-19 14:49:18,592 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20376 [2024-11-19 14:49:18,612 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20376 [2024-11-19 14:49:18,612 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20376 states and 37671 transitions. [2024-11-19 14:49:18,630 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:18,631 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20376 states and 37671 transitions. [2024-11-19 14:49:18,645 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20376 states and 37671 transitions. [2024-11-19 14:49:18,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20376 to 20374. [2024-11-19 14:49:19,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20374 states, 20374 states have (on average 1.8488760184548936) internal successors, (37669), 20373 states have internal predecessors, (37669), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:19,037 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20374 states to 20374 states and 37669 transitions. [2024-11-19 14:49:19,037 INFO L240 hiAutomatonCegarLoop]: Abstraction has 20374 states and 37669 transitions. [2024-11-19 14:49:19,037 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-19 14:49:19,038 INFO L425 stractBuchiCegarLoop]: Abstraction has 20374 states and 37669 transitions. [2024-11-19 14:49:19,038 INFO L332 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2024-11-19 14:49:19,038 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20374 states and 37669 transitions. [2024-11-19 14:49:19,100 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17414 [2024-11-19 14:49:19,101 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:19,101 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:19,105 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:19,105 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:19,106 INFO L745 eck$LassoCheckResult]: Stem: 372750#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 372751#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 373770#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 373329#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 373330#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 373153#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 373154#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 374323#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 373574#L3030 assume !(0 == getOrigin_~person#1); 373575#L3034 assume !(1 == getOrigin_~person#1); 373738#L3038 assume !(2 == getOrigin_~person#1); 373212#L3042 assume !(3 == getOrigin_~person#1); 373213#L3046 assume !(4 == getOrigin_~person#1); 374125#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 372772#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 372773#L2208 assume !(0 == initPersonOnFloor_~floor#1); 373988#L2235 assume 1 == initPersonOnFloor_~floor#1; 373788#L2236 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 372560#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 373038#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 373942#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 374424#L2000 assume !(0 == callOnFloor_~floorID#1); 374426#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 373081#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 373082#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 373147#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 372791#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 372474#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 372980#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 372981#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 373071#L2236-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 374662#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 374660#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 374656#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 374655#L2000-2 assume !(0 == callOnFloor_~floorID#1); 374654#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 374650#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 374649#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 374648#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 374647#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 374646#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 374645#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 374631#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 373893#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 373719#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 373721#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 374642#L1034 assume !(0 != timeShift_~tmp___9~2#1); 374353#L1125 assume !(1 == ~doorState~0); 372561#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 372562#L476 assume !(1 == stopRequestedInDirection_~dir#1); 374303#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 373811#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 372658#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 372659#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 374632#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 374644#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 372654#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 372655#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 374137#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 372806#L852-2 assume !(1 == ~currentHeading~0); 372807#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 372902#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 373675#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 373843#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 373948#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 373949#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 374186#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 386155#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 386160#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 386158#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 386139#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 386137#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 386135#L1637-2 [2024-11-19 14:49:19,106 INFO L747 eck$LassoCheckResult]: Loop: 386135#L1637-2 assume !false; 386134#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 386133#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 386132#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 386131#L1645 assume 1 != cleanup_~tmp___0~6#1; 386130#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 386129#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 386128#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 386127#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 372851#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 392628#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 392627#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 392626#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 374627#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 374629#L1940-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 392042#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 387815#L885-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 387813#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 386965#L1034-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 386958#L1036-2 assume !(0 != ~persons_0~0); 386952#L1036-3 assume !(0 != ~persons_1~0); 386947#L1050-1 assume !(0 != ~persons_2~0); 386936#L1064-1 assume !(0 != ~persons_3~0); 386912#L1078-1 assume !(0 != ~persons_4~0); 386910#L1092-1 assume !(0 != ~persons_5~0); 386906#L1106-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~5#1;havoc processWaitingOnFloor_~tmp___0~3#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 386905#L2028-12 assume !(0 == isPersonOnFloor_~floor#1); 386904#L2061-12 assume 1 == isPersonOnFloor_~floor#1; 386898#L2062-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 386869#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret24#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~3#1 := processWaitingOnFloor_#t~ret24#1;havoc processWaitingOnFloor_#t~ret24#1; 386867#L935-3 assume !(0 != processWaitingOnFloor_~tmp___0~3#1); 386865#L935-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 386864#L2028-14 assume 0 == isPersonOnFloor_~floor#1; 386656#L2029-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 386649#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret26#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret26#1;havoc processWaitingOnFloor_#t~ret26#1; 386647#L948-3 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 386645#L948-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 386644#L2028-16 assume 0 == isPersonOnFloor_~floor#1; 386630#L2029-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 386608#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret28#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret28#1;havoc processWaitingOnFloor_#t~ret28#1; 386606#L961-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 386607#L961-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 386828#L2028-18 assume 0 == isPersonOnFloor_~floor#1; 386805#L2029-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 386794#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret30#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret30#1;havoc processWaitingOnFloor_#t~ret30#1; 386792#L974-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 386793#L974-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 387349#L2028-20 assume 0 == isPersonOnFloor_~floor#1; 387310#L2029-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 387303#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret32#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret32#1;havoc processWaitingOnFloor_#t~ret32#1; 387301#L987-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 387299#L987-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~16#1; 387298#L2028-22 assume 0 == isPersonOnFloor_~floor#1; 387285#L2029-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~16#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~16#1; 387262#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~16#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 387260#L1000-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 387261#L1000-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 386222#L1967-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 386211#L1979-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 386204#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret24#1, processWaitingOnFloor_#t~ret25#1, processWaitingOnFloor_#t~ret26#1, processWaitingOnFloor_#t~ret27#1, processWaitingOnFloor_#t~ret28#1, processWaitingOnFloor_#t~ret29#1, processWaitingOnFloor_#t~ret30#1, processWaitingOnFloor_#t~ret31#1, processWaitingOnFloor_#t~ret32#1, processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~5#1, processWaitingOnFloor_~tmp___0~3#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 386197#L243-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 386182#L255-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 386179#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 386178#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 386177#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 386175#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 386151#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 386147#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 386144#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 386138#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 386136#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 386135#L1637-2 [2024-11-19 14:49:19,107 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:19,107 INFO L85 PathProgramCache]: Analyzing trace with hash -1344710500, now seen corresponding path program 1 times [2024-11-19 14:49:19,107 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:19,107 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1748084240] [2024-11-19 14:49:19,107 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:19,107 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:19,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:19,199 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:19,200 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:19,200 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1748084240] [2024-11-19 14:49:19,200 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1748084240] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:19,201 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:19,201 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:19,201 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1028987374] [2024-11-19 14:49:19,201 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:19,201 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:19,202 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:19,203 INFO L85 PathProgramCache]: Analyzing trace with hash -2005663943, now seen corresponding path program 1 times [2024-11-19 14:49:19,203 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:19,204 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1104225444] [2024-11-19 14:49:19,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:19,204 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:19,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:19,282 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:19,282 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:19,282 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1104225444] [2024-11-19 14:49:19,282 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1104225444] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:19,283 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:19,283 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:19,283 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2144480502] [2024-11-19 14:49:19,283 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:19,284 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:19,284 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:19,284 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:19,284 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:19,284 INFO L87 Difference]: Start difference. First operand 20374 states and 37669 transitions. cyclomatic complexity: 17296 Second operand has 5 states, 5 states have (on average 14.2) internal successors, (71), 5 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:20,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:20,490 INFO L93 Difference]: Finished difference Result 27112 states and 49960 transitions. [2024-11-19 14:49:20,490 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27112 states and 49960 transitions. [2024-11-19 14:49:20,590 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24164 [2024-11-19 14:49:20,654 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27112 states to 27112 states and 49960 transitions. [2024-11-19 14:49:20,654 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27112 [2024-11-19 14:49:20,674 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27112 [2024-11-19 14:49:20,674 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27112 states and 49960 transitions. [2024-11-19 14:49:20,691 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:20,691 INFO L218 hiAutomatonCegarLoop]: Abstraction has 27112 states and 49960 transitions. [2024-11-19 14:49:20,704 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27112 states and 49960 transitions. [2024-11-19 14:49:21,091 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27112 to 26516. [2024-11-19 14:49:21,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26516 states, 26516 states have (on average 1.8506562075727861) internal successors, (49072), 26515 states have internal predecessors, (49072), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:21,159 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26516 states to 26516 states and 49072 transitions. [2024-11-19 14:49:21,159 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26516 states and 49072 transitions. [2024-11-19 14:49:21,160 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-19 14:49:21,160 INFO L425 stractBuchiCegarLoop]: Abstraction has 26516 states and 49072 transitions. [2024-11-19 14:49:21,160 INFO L332 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2024-11-19 14:49:21,160 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26516 states and 49072 transitions. [2024-11-19 14:49:21,223 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:21,223 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:21,223 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:21,227 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:21,227 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:21,227 INFO L745 eck$LassoCheckResult]: Stem: 420249#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 420250#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 421277#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 420838#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 420839#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 420657#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 420658#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 421850#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 421083#L3030 assume !(0 == getOrigin_~person#1); 421084#L3034 assume !(1 == getOrigin_~person#1); 421241#L3038 assume !(2 == getOrigin_~person#1); 420719#L3042 assume !(3 == getOrigin_~person#1); 420720#L3046 assume !(4 == getOrigin_~person#1); 421650#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 420272#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 420273#L2208 assume !(0 == initPersonOnFloor_~floor#1); 421503#L2235 assume 1 == initPersonOnFloor_~floor#1; 421296#L2236 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 420058#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 420545#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 421455#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 421952#L2000 assume !(0 == callOnFloor_~floorID#1); 421953#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 420817#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 422257#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 422256#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 422255#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 422251#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 422259#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 422247#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 421619#L2236-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 420132#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 422183#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 422210#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 422209#L2000-2 assume !(0 == callOnFloor_~floorID#1); 422208#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 422204#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 422203#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 422202#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 422201#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 422200#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 422199#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 422180#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 421406#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 421226#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 421227#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 422197#L1034 assume !(0 != timeShift_~tmp___9~2#1); 421882#L1125 assume !(1 == ~doorState~0); 420059#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 420060#L476 assume !(1 == stopRequestedInDirection_~dir#1); 421828#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 421321#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 420157#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 420158#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 422182#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 422198#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 420147#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 420148#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 421662#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 420305#L852-2 assume !(1 == ~currentHeading~0); 420306#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 420405#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 421182#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 421353#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 421461#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 421462#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 421709#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 420859#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 420403#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 420971#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 420402#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 422097#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 422098#L1637-2 [2024-11-19 14:49:21,228 INFO L747 eck$LassoCheckResult]: Loop: 422098#L1637-2 assume !false; 434846#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 434842#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 434843#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 434838#L1645 assume 1 != cleanup_~tmp___0~6#1; 434839#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 434827#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 434828#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 428825#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 428823#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 428821#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 428822#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 440489#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 440487#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 440465#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 440463#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 428786#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 428763#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 428764#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 440418#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 440414#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 440415#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 440452#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 440417#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 440413#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 440407#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 440393#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 427671#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 427662#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 427655#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 427656#L645-2 assume !(0 == ~currentFloorID~0); 427701#L651-2 assume ~currentFloorID~0 > 0; 427695#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 427696#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 427700#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 427694#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 427460#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 427387#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 427379#L852-3 assume !(1 == ~currentHeading~0); 427367#L862-9 assume !(0 == ~currentFloorID~0); 424603#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 424598#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 424599#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 428745#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 428744#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 428743#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 428742#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 422853#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 422848#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 422809#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 422810#L1637-2 assume !false; 422805#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 422806#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 422801#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 422802#L1645 assume 1 != cleanup_~tmp___0~6#1; 422797#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 422798#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 422793#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 422794#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 428731#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 428782#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 428780#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 422762#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 422763#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 422742#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 422743#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 422738#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 422739#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 422736#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 422735#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 422734#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 422733#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 422731#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 422730#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 422729#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 422728#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 422727#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 422725#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 422726#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 422723#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 428477#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 428475#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 428471#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 428472#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 420688#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 420689#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 428502#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 428500#L852-5 assume !(1 == ~currentHeading~0); 428498#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 428499#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 421400#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 421401#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 434878#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 434877#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 434876#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 434874#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 434870#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 434871#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 434849#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 434850#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 422098#L1637-2 [2024-11-19 14:49:21,228 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:21,229 INFO L85 PathProgramCache]: Analyzing trace with hash -1344710500, now seen corresponding path program 2 times [2024-11-19 14:49:21,229 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:21,229 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2049931345] [2024-11-19 14:49:21,229 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-19 14:49:21,229 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:21,248 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:49:21,248 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:21,297 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:21,297 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:21,297 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2049931345] [2024-11-19 14:49:21,298 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2049931345] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:21,298 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:21,298 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:21,298 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2132256325] [2024-11-19 14:49:21,298 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:21,298 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:21,299 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:21,299 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 1 times [2024-11-19 14:49:21,299 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:21,299 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [718204317] [2024-11-19 14:49:21,299 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:21,299 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:21,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:21,411 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:49:21,412 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:21,412 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [718204317] [2024-11-19 14:49:21,412 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [718204317] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:21,412 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:21,412 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:21,413 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [558494017] [2024-11-19 14:49:21,413 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:21,413 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:21,413 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:21,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:21,414 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:21,414 INFO L87 Difference]: Start difference. First operand 26516 states and 49072 transitions. cyclomatic complexity: 22557 Second operand has 4 states, 4 states have (on average 18.0) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:21,641 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:21,641 INFO L93 Difference]: Finished difference Result 26560 states and 49132 transitions. [2024-11-19 14:49:21,642 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26560 states and 49132 transitions. [2024-11-19 14:49:21,737 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:22,048 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26560 states to 26560 states and 49132 transitions. [2024-11-19 14:49:22,048 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26560 [2024-11-19 14:49:22,067 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26560 [2024-11-19 14:49:22,067 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26560 states and 49132 transitions. [2024-11-19 14:49:22,080 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:22,080 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26560 states and 49132 transitions. [2024-11-19 14:49:22,089 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26560 states and 49132 transitions. [2024-11-19 14:49:22,264 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26560 to 26516. [2024-11-19 14:49:22,288 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26516 states, 26516 states have (on average 1.8501282244682455) internal successors, (49058), 26515 states have internal predecessors, (49058), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:22,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26516 states to 26516 states and 49058 transitions. [2024-11-19 14:49:22,329 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26516 states and 49058 transitions. [2024-11-19 14:49:22,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:22,329 INFO L425 stractBuchiCegarLoop]: Abstraction has 26516 states and 49058 transitions. [2024-11-19 14:49:22,329 INFO L332 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2024-11-19 14:49:22,329 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26516 states and 49058 transitions. [2024-11-19 14:49:22,403 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:22,403 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:22,403 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:22,407 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:22,407 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:22,408 INFO L745 eck$LassoCheckResult]: Stem: 473340#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 473341#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 474371#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 473922#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 473923#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 473744#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 473745#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 474950#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 474173#L3030 assume !(0 == getOrigin_~person#1); 474174#L3034 assume !(1 == getOrigin_~person#1); 474336#L3038 assume !(2 == getOrigin_~person#1); 473808#L3042 assume !(3 == getOrigin_~person#1); 473809#L3046 assume !(4 == getOrigin_~person#1); 474739#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 473362#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 473363#L2208 assume !(0 == initPersonOnFloor_~floor#1); 474597#L2235 assume 1 == initPersonOnFloor_~floor#1; 474389#L2236 assume !(0 == initPersonOnFloor_~person#1); 474390#L2239 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 473147#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 473634#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 474547#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 475056#L2000 assume !(0 == callOnFloor_~floorID#1); 475058#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 473676#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 473677#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 473738#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 473380#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 473062#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 473572#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 473573#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 473667#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 474708#L2239-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 475319#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 475317#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 475313#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 475312#L2000-2 assume !(0 == callOnFloor_~floorID#1); 475311#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 475307#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 475305#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 475304#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 475303#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 475302#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 475301#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 475285#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 474496#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 474319#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 474320#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 475299#L1034 assume !(0 != timeShift_~tmp___9~2#1); 474988#L1125 assume !(1 == ~doorState~0); 473148#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 473149#L476 assume !(1 == stopRequestedInDirection_~dir#1); 474928#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 474415#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 473248#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 473249#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 475287#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 475300#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 473244#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 473245#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 474751#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 473395#L852-2 assume !(1 == ~currentHeading~0); 473396#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 473492#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 474274#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 474447#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 474553#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 474554#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 474807#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 477740#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 477736#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 478723#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 481594#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 475191#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 475192#L1637-2 [2024-11-19 14:49:22,408 INFO L747 eck$LassoCheckResult]: Loop: 475192#L1637-2 assume !false; 487921#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 487922#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 487917#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 487918#L1645 assume 1 != cleanup_~tmp___0~6#1; 487913#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 487914#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 487871#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 487872#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 481920#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 481922#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 481912#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 481910#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 481889#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 481879#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 481874#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 481875#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 487875#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 487876#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 488005#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 488002#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 488003#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 487991#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 481932#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 481923#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 481924#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 476751#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 476749#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 476747#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 476745#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 476744#L645-2 assume !(0 == ~currentFloorID~0); 476739#L651-2 assume ~currentFloorID~0 > 0; 476737#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 476697#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 476695#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 476693#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 476678#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 477081#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 477078#L852-3 assume !(1 == ~currentHeading~0); 477076#L862-9 assume !(0 == ~currentFloorID~0); 477074#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 476543#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 476539#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 476540#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 476532#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 476533#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 476530#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 476531#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 475732#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 475733#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 475696#L1637-2 assume !false; 475697#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 475692#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 475693#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 475688#L1645 assume 1 != cleanup_~tmp___0~6#1; 475689#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 475684#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 475685#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 475679#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 475681#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 475674#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 475675#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 475649#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 475650#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 475630#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 475631#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 475626#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 475627#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 475624#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 475623#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 475622#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 475621#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 475619#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 475618#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 475615#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 475614#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 475598#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 475583#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 475570#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 475560#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 475556#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 475554#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 475553#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 475551#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 473778#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 473779#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 477703#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 477704#L852-5 assume !(1 == ~currentHeading~0); 478720#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 473992#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 474494#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 474495#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 488045#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 488044#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 488043#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 487939#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 487935#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 487931#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 487932#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 487928#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 475192#L1637-2 [2024-11-19 14:49:22,409 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:22,409 INFO L85 PathProgramCache]: Analyzing trace with hash -1887581108, now seen corresponding path program 1 times [2024-11-19 14:49:22,409 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:22,409 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1545772299] [2024-11-19 14:49:22,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:22,409 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:22,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:22,484 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:22,485 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:22,485 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1545772299] [2024-11-19 14:49:22,485 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1545772299] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:22,485 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:22,485 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:22,485 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [84520572] [2024-11-19 14:49:22,485 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:22,485 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:22,486 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:22,486 INFO L85 PathProgramCache]: Analyzing trace with hash 797598812, now seen corresponding path program 1 times [2024-11-19 14:49:22,486 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:22,486 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1058208651] [2024-11-19 14:49:22,486 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:22,486 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:22,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:22,806 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:49:22,807 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:22,807 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1058208651] [2024-11-19 14:49:22,807 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1058208651] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:22,807 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:22,807 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:22,808 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1945286613] [2024-11-19 14:49:22,808 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:22,808 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:22,809 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:22,809 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:22,809 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:22,809 INFO L87 Difference]: Start difference. First operand 26516 states and 49058 transitions. cyclomatic complexity: 22543 Second operand has 4 states, 4 states have (on average 18.5) internal successors, (74), 4 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:23,105 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:23,106 INFO L93 Difference]: Finished difference Result 26560 states and 49118 transitions. [2024-11-19 14:49:23,106 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26560 states and 49118 transitions. [2024-11-19 14:49:23,236 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:23,315 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26560 states to 26560 states and 49118 transitions. [2024-11-19 14:49:23,315 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26560 [2024-11-19 14:49:23,338 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26560 [2024-11-19 14:49:23,338 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26560 states and 49118 transitions. [2024-11-19 14:49:23,358 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:23,358 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26560 states and 49118 transitions. [2024-11-19 14:49:23,372 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26560 states and 49118 transitions. [2024-11-19 14:49:23,580 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26560 to 26516. [2024-11-19 14:49:23,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26516 states, 26516 states have (on average 1.849600241363705) internal successors, (49044), 26515 states have internal predecessors, (49044), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:23,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26516 states to 26516 states and 49044 transitions. [2024-11-19 14:49:23,652 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26516 states and 49044 transitions. [2024-11-19 14:49:23,653 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:23,653 INFO L425 stractBuchiCegarLoop]: Abstraction has 26516 states and 49044 transitions. [2024-11-19 14:49:23,653 INFO L332 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2024-11-19 14:49:23,654 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26516 states and 49044 transitions. [2024-11-19 14:49:23,741 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:23,742 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:23,742 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:23,746 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:23,746 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:23,747 INFO L745 eck$LassoCheckResult]: Stem: 526422#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 526423#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 527477#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 527017#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 527018#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 526835#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 526836#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 528064#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 527271#L3030 assume !(0 == getOrigin_~person#1); 527272#L3034 assume !(1 == getOrigin_~person#1); 527443#L3038 assume !(2 == getOrigin_~person#1); 526900#L3042 assume !(3 == getOrigin_~person#1); 526901#L3046 assume !(4 == getOrigin_~person#1); 527851#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 526447#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 526448#L2208 assume !(0 == initPersonOnFloor_~floor#1); 527706#L2235 assume 1 == initPersonOnFloor_~floor#1; 527497#L2236 assume !(0 == initPersonOnFloor_~person#1); 527498#L2239 assume !(1 == initPersonOnFloor_~person#1); 527586#L2242 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 526235#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 526722#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 527657#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 528170#L2000 assume !(0 == callOnFloor_~floorID#1); 528172#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 526767#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 526768#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 526828#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 526829#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 528464#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 528463#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 528460#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 527820#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 526305#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 526306#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 528437#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 528435#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 528431#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 528430#L2000-2 assume !(0 == callOnFloor_~floorID#1); 528429#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 528425#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 528423#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 528422#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 528421#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 528420#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 528419#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 528403#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 527604#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 527423#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 527425#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 528416#L1034 assume !(0 != timeShift_~tmp___9~2#1); 528099#L1125 assume !(1 == ~doorState~0); 526236#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 526237#L476 assume !(1 == stopRequestedInDirection_~dir#1); 528040#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 527522#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 526333#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 526334#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 528404#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 528418#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 526329#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 526330#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 527866#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 526481#L852-2 assume !(1 == ~currentHeading~0); 526482#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 526582#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 527378#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 527554#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 527663#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 527664#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 527919#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 527041#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 526580#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 527156#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 526579#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 528307#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 528308#L1637-2 [2024-11-19 14:49:23,747 INFO L747 eck$LassoCheckResult]: Loop: 528308#L1637-2 assume !false; 552585#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 552584#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 552583#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 549580#L1645 assume 1 != cleanup_~tmp___0~6#1; 549034#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 548582#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 544400#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 544393#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 539983#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 539493#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 535566#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 535562#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 535561#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 535550#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 535000#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 534993#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 534749#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 534750#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 537073#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 546631#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 546632#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 546635#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 546633#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 546630#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 546628#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 546627#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 528802#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 528801#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 528798#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 528796#L645-2 assume !(0 == ~currentFloorID~0); 528794#L651-2 assume ~currentFloorID~0 > 0; 527801#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 526687#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 526688#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 528326#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 530743#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 530735#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 530728#L852-3 assume !(1 == ~currentHeading~0); 530721#L862-9 assume !(0 == ~currentFloorID~0); 530711#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 530706#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 530707#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 535634#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 535632#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 535633#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 530693#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 530694#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 535615#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 535614#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 535613#L1637-2 assume !false; 535612#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 535611#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 535610#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 535609#L1645 assume 1 != cleanup_~tmp___0~6#1; 535608#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 535604#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 535602#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 528918#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 528916#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 528915#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 528913#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 528896#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 528897#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 534992#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 528874#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 528875#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 534748#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 528870#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 528869#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 528868#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 528867#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 528865#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 528862#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 528846#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 528200#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 527421#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 527422#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 528137#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 528811#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 527044#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 526359#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 526361#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 533818#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 526869#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 526574#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 526937#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 526938#L852-5 assume !(1 == ~currentHeading~0); 534622#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 534623#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 527602#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 527603#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 552561#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 527668#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 527669#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 552595#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 552591#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 552588#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 552587#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 552586#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 528308#L1637-2 [2024-11-19 14:49:23,748 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:23,749 INFO L85 PathProgramCache]: Analyzing trace with hash -82707140, now seen corresponding path program 1 times [2024-11-19 14:49:23,749 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:23,749 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [91256713] [2024-11-19 14:49:23,749 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:23,749 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:23,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:24,005 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:24,005 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:24,005 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [91256713] [2024-11-19 14:49:24,006 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [91256713] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:24,006 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:24,006 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:24,006 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1313806096] [2024-11-19 14:49:24,006 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:24,006 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:24,007 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:24,007 INFO L85 PathProgramCache]: Analyzing trace with hash 797598812, now seen corresponding path program 2 times [2024-11-19 14:49:24,007 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:24,007 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [291727600] [2024-11-19 14:49:24,007 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-19 14:49:24,007 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:24,028 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:49:24,029 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:24,126 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-19 14:49:24,127 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:24,127 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [291727600] [2024-11-19 14:49:24,127 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [291727600] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:24,127 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:24,128 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:24,128 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2128807470] [2024-11-19 14:49:24,128 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:24,128 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:24,129 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:24,129 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:24,129 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:24,129 INFO L87 Difference]: Start difference. First operand 26516 states and 49044 transitions. cyclomatic complexity: 22529 Second operand has 4 states, 4 states have (on average 19.0) internal successors, (76), 4 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:24,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:24,397 INFO L93 Difference]: Finished difference Result 26532 states and 49066 transitions. [2024-11-19 14:49:24,397 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26532 states and 49066 transitions. [2024-11-19 14:49:24,512 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:24,574 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26532 states to 26532 states and 49066 transitions. [2024-11-19 14:49:24,574 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26532 [2024-11-19 14:49:24,595 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26532 [2024-11-19 14:49:24,595 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26532 states and 49066 transitions. [2024-11-19 14:49:24,613 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:24,613 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26532 states and 49066 transitions. [2024-11-19 14:49:24,628 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26532 states and 49066 transitions. [2024-11-19 14:49:24,786 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26532 to 26516. [2024-11-19 14:49:24,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26516 states, 26516 states have (on average 1.8494493890481218) internal successors, (49040), 26515 states have internal predecessors, (49040), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:24,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26516 states to 26516 states and 49040 transitions. [2024-11-19 14:49:24,852 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26516 states and 49040 transitions. [2024-11-19 14:49:24,852 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:24,853 INFO L425 stractBuchiCegarLoop]: Abstraction has 26516 states and 49040 transitions. [2024-11-19 14:49:24,853 INFO L332 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2024-11-19 14:49:24,853 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26516 states and 49040 transitions. [2024-11-19 14:49:25,093 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:25,093 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:25,093 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:25,096 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:25,096 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:25,096 INFO L745 eck$LassoCheckResult]: Stem: 579481#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 579482#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 580512#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 580068#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 580069#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 579891#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 579892#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 581087#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 580316#L3030 assume !(0 == getOrigin_~person#1); 580317#L3034 assume !(1 == getOrigin_~person#1); 580477#L3038 assume !(2 == getOrigin_~person#1); 579952#L3042 assume !(3 == getOrigin_~person#1); 579953#L3046 assume !(4 == getOrigin_~person#1); 580879#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 579505#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 579506#L2208 assume !(0 == initPersonOnFloor_~floor#1); 580739#L2235 assume !(1 == initPersonOnFloor_~floor#1); 580740#L2262 assume !(2 == initPersonOnFloor_~floor#1); 579372#L2289 assume !(3 == initPersonOnFloor_~floor#1); 579374#L2316 assume !(4 == initPersonOnFloor_~floor#1); 579294#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 579777#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 580692#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 581184#L2000 assume !(0 == callOnFloor_~floorID#1); 581185#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 580050#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 581463#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 581462#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 581459#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 581457#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 581454#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 581451#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 581449#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 581447#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 581440#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 581423#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 581421#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 581417#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 581416#L2000-2 assume !(0 == callOnFloor_~floorID#1); 581415#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 581411#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 581410#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 581409#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 581408#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 581407#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 581406#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 581393#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 580642#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 580461#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 580462#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 581404#L1034 assume !(0 != timeShift_~tmp___9~2#1); 581120#L1125 assume !(1 == ~doorState~0); 579295#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 579296#L476 assume !(1 == stopRequestedInDirection_~dir#1); 581063#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 580558#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 579392#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 579393#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 581394#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 581405#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 579385#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 579386#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 580892#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 579540#L852-2 assume !(1 == ~currentHeading~0); 579541#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 579640#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 580416#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 580591#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 580698#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 580699#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 580939#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 580091#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 579638#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 580204#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 579637#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 581307#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 581308#L1637-2 [2024-11-19 14:49:25,097 INFO L747 eck$LassoCheckResult]: Loop: 581308#L1637-2 assume !false; 591879#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 591878#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 591877#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 591876#L1645 assume 1 != cleanup_~tmp___0~6#1; 591875#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 591873#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 591874#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 601126#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 601127#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 605346#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 605596#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 605589#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 605587#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 605565#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 605563#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 605561#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 605559#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 605556#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 580756#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 580110#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 580112#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 580122#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 579831#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 580119#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 581244#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 581332#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 581643#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 581623#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 581620#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 581621#L645-2 assume !(0 == ~currentFloorID~0); 581634#L651-2 assume ~currentFloorID~0 > 0; 581631#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 581629#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 581610#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 581611#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 583371#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 583363#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 583357#L852-3 assume !(1 == ~currentHeading~0); 583350#L862-9 assume !(0 == ~currentFloorID~0); 583340#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 583335#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 583336#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 587962#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 587959#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 587960#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 587961#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 581908#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 581903#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 581850#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 581851#L1637-2 assume !false; 581846#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 581847#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 581842#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 581843#L1645 assume 1 != cleanup_~tmp___0~6#1; 581838#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 581839#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 581834#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 581835#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 587939#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 587970#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 587999#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 581803#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 581804#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 581783#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 581784#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 581779#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 581780#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 581777#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 581776#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 581775#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 581774#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 581772#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 581771#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 581768#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 581770#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 586709#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 586675#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 579543#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 579544#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 587165#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 587164#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 587162#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 587159#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 579923#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 579924#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 587770#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 587768#L852-5 assume !(1 == ~currentHeading~0); 587767#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 580137#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 580639#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 580640#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 591910#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 591908#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 591906#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 591904#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 591902#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 591890#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 591883#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 591882#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 581308#L1637-2 [2024-11-19 14:49:25,097 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:25,097 INFO L85 PathProgramCache]: Analyzing trace with hash 84048316, now seen corresponding path program 1 times [2024-11-19 14:49:25,097 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:25,097 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2006233339] [2024-11-19 14:49:25,097 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:25,098 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:25,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:25,162 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:25,162 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:25,163 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2006233339] [2024-11-19 14:49:25,163 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2006233339] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:25,163 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:25,163 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:25,163 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1929044727] [2024-11-19 14:49:25,163 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:25,163 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:25,164 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:25,164 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 2 times [2024-11-19 14:49:25,164 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:25,164 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1256192255] [2024-11-19 14:49:25,164 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-19 14:49:25,164 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:25,182 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:49:25,182 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:25,214 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-11-19 14:49:25,214 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:25,214 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1256192255] [2024-11-19 14:49:25,214 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1256192255] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:25,215 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:25,215 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:25,215 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [592213192] [2024-11-19 14:49:25,215 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:25,215 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:25,216 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:25,216 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:25,216 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:25,216 INFO L87 Difference]: Start difference. First operand 26516 states and 49040 transitions. cyclomatic complexity: 22525 Second operand has 4 states, 4 states have (on average 19.0) internal successors, (76), 4 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:25,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:25,348 INFO L93 Difference]: Finished difference Result 26503 states and 49014 transitions. [2024-11-19 14:49:25,348 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26503 states and 49014 transitions. [2024-11-19 14:49:25,452 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:25,520 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26503 states to 26503 states and 49014 transitions. [2024-11-19 14:49:25,520 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26503 [2024-11-19 14:49:25,540 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26503 [2024-11-19 14:49:25,540 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26503 states and 49014 transitions. [2024-11-19 14:49:25,557 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:25,558 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26503 states and 49014 transitions. [2024-11-19 14:49:25,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26503 states and 49014 transitions. [2024-11-19 14:49:25,732 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26503 to 26501. [2024-11-19 14:49:25,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26501 states, 26501 states have (on average 1.8494396437870269) internal successors, (49012), 26500 states have internal predecessors, (49012), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:26,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26501 states to 26501 states and 49012 transitions. [2024-11-19 14:49:26,099 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26501 states and 49012 transitions. [2024-11-19 14:49:26,100 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:26,100 INFO L425 stractBuchiCegarLoop]: Abstraction has 26501 states and 49012 transitions. [2024-11-19 14:49:26,100 INFO L332 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2024-11-19 14:49:26,100 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26501 states and 49012 transitions. [2024-11-19 14:49:26,181 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:26,182 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:26,182 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:26,185 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:26,185 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:26,186 INFO L745 eck$LassoCheckResult]: Stem: 632506#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 632507#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 633563#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 633097#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 633098#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 632913#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 632914#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 634166#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 633357#L3030 assume !(0 == getOrigin_~person#1); 633358#L3034 assume !(1 == getOrigin_~person#1); 633530#L3038 assume !(2 == getOrigin_~person#1); 632977#L3042 assume !(3 == getOrigin_~person#1); 632978#L3046 assume !(4 == getOrigin_~person#1); 633956#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 632532#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 632533#L2208 assume !(0 == initPersonOnFloor_~floor#1); 633801#L2235 assume 1 == initPersonOnFloor_~floor#1; 633583#L2236 assume !(0 == initPersonOnFloor_~person#1); 633584#L2239 assume !(1 == initPersonOnFloor_~person#1); 633674#L2242 assume !(2 == initPersonOnFloor_~person#1); 633675#L2245 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 632800#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 632801#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 633752#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 634270#L2000 assume !(0 == callOnFloor_~floorID#1); 634272#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 632842#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 632843#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 632907#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 632548#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 632549#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 634617#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 634598#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 632834#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 632393#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 632394#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 634576#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 634574#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 634570#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 634569#L2000-2 assume !(0 == callOnFloor_~floorID#1); 634568#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 634564#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 634563#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 634562#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 634561#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 634560#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 634559#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 634534#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 633693#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 633513#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 633515#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 634556#L1034 assume !(0 != timeShift_~tmp___9~2#1); 634200#L1125 assume !(1 == ~doorState~0); 632323#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 632324#L476 assume !(1 == stopRequestedInDirection_~dir#1); 634143#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 633609#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 632418#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 632419#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 634539#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 634558#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 632411#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 632412#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 633969#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 632567#L852-2 assume !(1 == ~currentHeading~0); 632568#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 632662#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 633464#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 633642#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 633758#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 633759#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 634021#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 633122#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 632660#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 633238#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 632659#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 634419#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 634420#L1637-2 [2024-11-19 14:49:26,186 INFO L747 eck$LassoCheckResult]: Loop: 634420#L1637-2 assume !false; 641248#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 641247#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 641246#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 641241#L1645 assume 1 != cleanup_~tmp___0~6#1; 641230#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 641228#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 641224#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 641222#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 641160#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 641161#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 641328#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 641313#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 641309#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 640916#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 640914#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 640909#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 640904#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 640905#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 641093#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 653541#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 653542#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 653555#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 653553#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 653308#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 653276#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 653274#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 634874#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 634873#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 634871#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 634868#L645-2 assume !(0 == ~currentFloorID~0); 634519#L651-2 assume ~currentFloorID~0 > 0; 633902#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 633903#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 634865#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 634866#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 640137#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 640225#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 640220#L852-3 assume !(1 == ~currentHeading~0); 637237#L862-9 assume !(0 == ~currentFloorID~0); 637227#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 637220#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 635548#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 635540#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 635537#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 635538#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 635539#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 635511#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 635492#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 635457#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 635453#L1637-2 assume !false; 635449#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 635443#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 635440#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 635437#L1645 assume 1 != cleanup_~tmp___0~6#1; 635416#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 635415#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 635414#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 635411#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 635413#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 635405#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 635406#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 635379#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 635380#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 641168#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 641167#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 635343#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 635344#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 635341#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 635340#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 635339#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 635338#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 635336#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 635335#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 635333#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 634306#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 633511#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 633512#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 632570#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 632571#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 635271#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 635269#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 635270#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 635256#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 635230#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 635210#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 635208#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 635209#L852-5 assume !(1 == ~currentHeading~0); 635316#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 633170#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 633690#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 633691#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 641293#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 641292#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 641286#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 641264#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 641260#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 641257#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 641256#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 641252#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 634420#L1637-2 [2024-11-19 14:49:26,187 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:26,187 INFO L85 PathProgramCache]: Analyzing trace with hash 1738602428, now seen corresponding path program 1 times [2024-11-19 14:49:26,187 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:26,187 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2141880816] [2024-11-19 14:49:26,187 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:26,187 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:26,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:26,256 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:26,256 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:26,256 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2141880816] [2024-11-19 14:49:26,256 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2141880816] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:26,257 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:26,257 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:26,257 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1766665903] [2024-11-19 14:49:26,257 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:26,257 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:26,257 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:26,258 INFO L85 PathProgramCache]: Analyzing trace with hash 797598812, now seen corresponding path program 3 times [2024-11-19 14:49:26,258 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:26,258 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [942596634] [2024-11-19 14:49:26,258 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-11-19 14:49:26,258 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:26,276 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2024-11-19 14:49:26,277 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:26,362 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-19 14:49:26,363 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:26,363 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [942596634] [2024-11-19 14:49:26,363 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [942596634] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:26,363 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:26,363 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:26,363 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1391899532] [2024-11-19 14:49:26,363 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:26,364 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:26,364 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:26,364 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:26,365 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:26,366 INFO L87 Difference]: Start difference. First operand 26501 states and 49012 transitions. cyclomatic complexity: 22512 Second operand has 4 states, 4 states have (on average 19.25) internal successors, (77), 4 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:26,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:26,541 INFO L93 Difference]: Finished difference Result 26529 states and 49049 transitions. [2024-11-19 14:49:26,542 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26529 states and 49049 transitions. [2024-11-19 14:49:26,637 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:26,703 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26529 states to 26529 states and 49049 transitions. [2024-11-19 14:49:26,704 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26529 [2024-11-19 14:49:26,724 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26529 [2024-11-19 14:49:26,725 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26529 states and 49049 transitions. [2024-11-19 14:49:26,741 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:26,742 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26529 states and 49049 transitions. [2024-11-19 14:49:26,757 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26529 states and 49049 transitions. [2024-11-19 14:49:27,223 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26529 to 26501. [2024-11-19 14:49:27,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26501 states, 26501 states have (on average 1.8490245651107506) internal successors, (49001), 26500 states have internal predecessors, (49001), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:27,298 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26501 states to 26501 states and 49001 transitions. [2024-11-19 14:49:27,298 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26501 states and 49001 transitions. [2024-11-19 14:49:27,298 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:27,299 INFO L425 stractBuchiCegarLoop]: Abstraction has 26501 states and 49001 transitions. [2024-11-19 14:49:27,299 INFO L332 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2024-11-19 14:49:27,299 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26501 states and 49001 transitions. [2024-11-19 14:49:27,385 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:27,385 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:27,385 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:27,390 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:27,390 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:27,390 INFO L745 eck$LassoCheckResult]: Stem: 685547#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 685548#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 686568#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 686125#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 686126#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 685948#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 685949#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 687151#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 686371#L3030 assume !(0 == getOrigin_~person#1); 686372#L3034 assume !(1 == getOrigin_~person#1); 686535#L3038 assume !(2 == getOrigin_~person#1); 686008#L3042 assume !(3 == getOrigin_~person#1); 686009#L3046 assume !(4 == getOrigin_~person#1); 686939#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 685573#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 685574#L2208 assume !(0 == initPersonOnFloor_~floor#1); 686794#L2235 assume 1 == initPersonOnFloor_~floor#1; 686588#L2236 assume !(0 == initPersonOnFloor_~person#1); 686589#L2239 assume !(1 == initPersonOnFloor_~person#1); 686677#L2242 assume !(2 == initPersonOnFloor_~person#1); 686678#L2245 assume !(3 == initPersonOnFloor_~person#1); 687350#L2248 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 685837#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 685838#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 686748#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 687254#L2000 assume !(0 == callOnFloor_~floorID#1); 687255#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 686106#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 687531#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 687530#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 687526#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 687525#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 687524#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 687521#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 686906#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 686907#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 686368#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 685592#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 685449#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 685450#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 685785#L2000-2 assume !(0 == callOnFloor_~floorID#1); 686433#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 686042#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 686043#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 687495#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 687494#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 687493#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 687492#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 687479#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 686695#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 686516#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 686517#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 687490#L1034 assume !(0 != timeShift_~tmp___9~2#1); 687187#L1125 assume !(1 == ~doorState~0); 685364#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 685365#L476 assume !(1 == stopRequestedInDirection_~dir#1); 687125#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 686614#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 685459#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 685460#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 687481#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 687491#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 685452#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 685453#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 686952#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 685607#L852-2 assume !(1 == ~currentHeading~0); 685608#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 685702#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 686472#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 686646#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 686754#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 686755#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 687007#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 686148#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 685700#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 685799#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 685699#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 686594#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 693977#L1637-2 [2024-11-19 14:49:27,391 INFO L747 eck$LassoCheckResult]: Loop: 693977#L1637-2 assume !false; 693975#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 693972#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 693970#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 693968#L1645 assume 1 != cleanup_~tmp___0~6#1; 693966#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 693964#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 693962#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 693959#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 693957#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 693949#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 693931#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 693926#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 693927#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 707845#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 707843#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 707841#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 707839#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 707835#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 707834#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 707826#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 707827#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 707831#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 707829#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 707828#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 707825#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 707822#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 687631#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 687630#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 687628#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 687626#L645-2 assume !(0 == ~currentFloorID~0); 687627#L651-2 assume ~currentFloorID~0 > 0; 691868#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 691869#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 691881#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 691866#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 691867#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 692581#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 692783#L852-3 assume !(1 == ~currentHeading~0); 692782#L862-9 assume !(0 == ~currentFloorID~0); 692780#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 689558#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 689528#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 689527#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 689524#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 689525#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 689526#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 689504#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 687872#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 687838#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 687837#L1637-2 assume !false; 687836#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 687835#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 687834#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 687833#L1645 assume 1 != cleanup_~tmp___0~6#1; 687832#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 687831#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 687830#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 687828#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 687826#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 687824#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 687825#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 694065#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 694064#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 694056#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 694055#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 687784#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 687785#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 687782#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 687781#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 687780#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 687779#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 687777#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 687776#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 687774#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 687284#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 686514#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 686515#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 685610#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 685386#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 686151#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 685485#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 685487#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 693591#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 685977#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 685978#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 693804#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 686714#L852-5 assume !(1 == ~currentHeading~0); 686715#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 687487#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 687488#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 697169#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 697168#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 697167#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 697166#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 693999#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 693992#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 693989#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 693987#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 693980#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 693977#L1637-2 [2024-11-19 14:49:27,392 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:27,392 INFO L85 PathProgramCache]: Analyzing trace with hash 1221950017, now seen corresponding path program 1 times [2024-11-19 14:49:27,392 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:27,392 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1261939610] [2024-11-19 14:49:27,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:27,392 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:27,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:27,493 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:27,493 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:27,493 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1261939610] [2024-11-19 14:49:27,493 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1261939610] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:27,494 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:27,494 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:27,494 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1331214030] [2024-11-19 14:49:27,494 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:27,494 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:27,495 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:27,495 INFO L85 PathProgramCache]: Analyzing trace with hash 797598812, now seen corresponding path program 4 times [2024-11-19 14:49:27,495 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:27,495 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1101905979] [2024-11-19 14:49:27,495 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-11-19 14:49:27,495 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:27,520 INFO L227 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-11-19 14:49:27,520 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:27,614 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:49:27,614 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:27,614 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1101905979] [2024-11-19 14:49:27,615 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1101905979] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:27,615 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:27,615 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:27,615 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [139798443] [2024-11-19 14:49:27,615 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:27,616 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:27,616 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:27,617 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:27,617 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:27,617 INFO L87 Difference]: Start difference. First operand 26501 states and 49001 transitions. cyclomatic complexity: 22501 Second operand has 4 states, 4 states have (on average 19.5) internal successors, (78), 4 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:27,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:27,798 INFO L93 Difference]: Finished difference Result 26529 states and 49038 transitions. [2024-11-19 14:49:27,798 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26529 states and 49038 transitions. [2024-11-19 14:49:27,921 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:28,008 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26529 states to 26529 states and 49038 transitions. [2024-11-19 14:49:28,008 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26529 [2024-11-19 14:49:28,034 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26529 [2024-11-19 14:49:28,035 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26529 states and 49038 transitions. [2024-11-19 14:49:28,056 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:28,056 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26529 states and 49038 transitions. [2024-11-19 14:49:28,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26529 states and 49038 transitions. [2024-11-19 14:49:28,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26529 to 26501. [2024-11-19 14:49:28,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26501 states, 26501 states have (on average 1.8486094864344742) internal successors, (48990), 26500 states have internal predecessors, (48990), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:28,799 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26501 states to 26501 states and 48990 transitions. [2024-11-19 14:49:28,800 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26501 states and 48990 transitions. [2024-11-19 14:49:28,800 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:28,801 INFO L425 stractBuchiCegarLoop]: Abstraction has 26501 states and 48990 transitions. [2024-11-19 14:49:28,801 INFO L332 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2024-11-19 14:49:28,801 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26501 states and 48990 transitions. [2024-11-19 14:49:28,866 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:28,867 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:28,867 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:28,871 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:28,871 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:28,871 INFO L745 eck$LassoCheckResult]: Stem: 738592#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 738593#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 739630#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 739176#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 739177#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 738993#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 738994#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 740213#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 739430#L3030 assume !(0 == getOrigin_~person#1); 739431#L3034 assume !(1 == getOrigin_~person#1); 739594#L3038 assume !(2 == getOrigin_~person#1); 739057#L3042 assume !(3 == getOrigin_~person#1); 739058#L3046 assume !(4 == getOrigin_~person#1); 740005#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 738615#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 738616#L2208 assume !(0 == initPersonOnFloor_~floor#1); 739854#L2235 assume 1 == initPersonOnFloor_~floor#1; 739648#L2236 assume !(0 == initPersonOnFloor_~person#1); 739649#L2239 assume !(1 == initPersonOnFloor_~person#1); 739738#L2242 assume !(2 == initPersonOnFloor_~person#1); 739739#L2245 assume !(3 == initPersonOnFloor_~person#1); 740419#L2248 assume !(4 == initPersonOnFloor_~person#1); 740447#L2251 assume !(5 == initPersonOnFloor_~person#1); 738880#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 738881#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 739804#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 740322#L2000 assume !(0 == callOnFloor_~floorID#1); 740323#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 739157#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 740612#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 740611#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 740606#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 740605#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 740604#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 740601#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 739972#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 739973#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 739425#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 738636#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 738494#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 738495#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 738828#L2000-2 assume !(0 == callOnFloor_~floorID#1); 739494#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 739091#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 739092#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 740575#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 740574#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 740573#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 740572#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 740557#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 739756#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 739578#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 739580#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 740569#L1034 assume !(0 != timeShift_~tmp___9~2#1); 740252#L1125 assume !(1 == ~doorState~0); 738406#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 738407#L476 assume !(1 == stopRequestedInDirection_~dir#1); 740191#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 739674#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 738501#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 738502#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 740560#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 740571#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 738497#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 738498#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 740016#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 738649#L852-2 assume !(1 == ~currentHeading~0); 738650#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 738745#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 739534#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 739706#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 739812#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 739813#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 740066#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 739200#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 738743#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 739314#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 738742#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 740470#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 740471#L1637-2 [2024-11-19 14:49:28,872 INFO L747 eck$LassoCheckResult]: Loop: 740471#L1637-2 assume !false; 747152#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 747153#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 747119#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 747120#L1645 assume 1 != cleanup_~tmp___0~6#1; 747115#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 747116#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 747111#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 747112#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 747106#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 747104#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 747105#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 747085#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 747086#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 756288#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 756287#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 756286#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 756285#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 756282#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 756277#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 756274#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 756275#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 756279#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 756276#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 756273#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 756271#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 756270#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 741691#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 741690#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 741689#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 741688#L645-2 assume !(0 == ~currentFloorID~0); 741687#L651-2 assume ~currentFloorID~0 > 0; 741686#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 741685#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 741684#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 741683#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 741682#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 741653#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 741652#L852-3 assume !(1 == ~currentHeading~0); 741541#L862-9 assume !(0 == ~currentFloorID~0); 741516#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 741499#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 741498#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 741495#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 741493#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 741494#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 741491#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 741492#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 741450#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 741451#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 741415#L1637-2 assume !false; 741416#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 741411#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 741412#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 741407#L1645 assume 1 != cleanup_~tmp___0~6#1; 741408#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 741403#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 741404#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 741398#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 741400#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 741393#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 741394#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 741369#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 741370#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 741349#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 741350#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 741345#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 741346#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 741339#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 741338#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 741337#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 741336#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 741334#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 741333#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 741332#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 740353#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 739576#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 739577#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 740289#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 741118#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 741233#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 741225#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 741226#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 741219#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 741195#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 741176#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 741174#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 741172#L852-5 assume !(1 == ~currentHeading~0); 741171#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 739246#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 739753#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 739754#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 750133#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 750129#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 750130#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 750125#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 750126#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 747169#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 747160#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 747156#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 740471#L1637-2 [2024-11-19 14:49:28,873 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:28,873 INFO L85 PathProgramCache]: Analyzing trace with hash -1791129757, now seen corresponding path program 1 times [2024-11-19 14:49:28,873 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:28,873 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1883356447] [2024-11-19 14:49:28,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:28,875 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:28,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:28,929 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:28,929 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:28,929 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1883356447] [2024-11-19 14:49:28,929 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1883356447] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:28,930 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:28,930 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:28,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [805931518] [2024-11-19 14:49:28,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:28,930 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:28,931 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:28,931 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 3 times [2024-11-19 14:49:28,931 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:28,931 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1410149476] [2024-11-19 14:49:28,931 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-11-19 14:49:28,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:28,947 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2024-11-19 14:49:28,947 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:28,979 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-11-19 14:49:28,980 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:28,980 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1410149476] [2024-11-19 14:49:28,980 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1410149476] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:28,980 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:28,981 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:28,981 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [499218380] [2024-11-19 14:49:28,981 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:28,981 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:28,981 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:28,982 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-19 14:49:28,982 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-19 14:49:28,982 INFO L87 Difference]: Start difference. First operand 26501 states and 48990 transitions. cyclomatic complexity: 22490 Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:29,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:29,112 INFO L93 Difference]: Finished difference Result 26501 states and 48989 transitions. [2024-11-19 14:49:29,113 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26501 states and 48989 transitions. [2024-11-19 14:49:29,204 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:29,265 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26501 states to 26501 states and 48989 transitions. [2024-11-19 14:49:29,265 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26501 [2024-11-19 14:49:29,287 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26501 [2024-11-19 14:49:29,288 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26501 states and 48989 transitions. [2024-11-19 14:49:29,305 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:29,305 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26501 states and 48989 transitions. [2024-11-19 14:49:29,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26501 states and 48989 transitions. [2024-11-19 14:49:29,479 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26501 to 26501. [2024-11-19 14:49:29,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26501 states, 26501 states have (on average 1.848571752009358) internal successors, (48989), 26500 states have internal predecessors, (48989), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:29,538 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26501 states to 26501 states and 48989 transitions. [2024-11-19 14:49:29,538 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26501 states and 48989 transitions. [2024-11-19 14:49:29,539 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-19 14:49:29,539 INFO L425 stractBuchiCegarLoop]: Abstraction has 26501 states and 48989 transitions. [2024-11-19 14:49:29,539 INFO L332 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2024-11-19 14:49:29,539 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26501 states and 48989 transitions. [2024-11-19 14:49:29,604 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:29,604 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:29,605 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:29,609 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:29,609 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:29,609 INFO L745 eck$LassoCheckResult]: Stem: 791601#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 791602#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 792637#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 792187#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 792188#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 792006#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 792007#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 793222#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 792436#L3030 assume !(0 == getOrigin_~person#1); 792437#L3034 assume !(1 == getOrigin_~person#1); 792600#L3038 assume !(2 == getOrigin_~person#1); 792067#L3042 assume !(3 == getOrigin_~person#1); 792068#L3046 assume !(4 == getOrigin_~person#1); 793010#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 791627#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 791628#L2208 assume !(0 == initPersonOnFloor_~floor#1); 792864#L2235 assume 1 == initPersonOnFloor_~floor#1; 792656#L2236 assume !(0 == initPersonOnFloor_~person#1); 792657#L2239 assume !(1 == initPersonOnFloor_~person#1); 792747#L2242 assume !(2 == initPersonOnFloor_~person#1); 792748#L2245 assume !(3 == initPersonOnFloor_~person#1); 793416#L2248 assume !(4 == initPersonOnFloor_~person#1); 793436#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 791894#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 791895#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 792817#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 793321#L2000 assume !(0 == callOnFloor_~floorID#1); 793322#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 792168#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 793642#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 793641#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 793638#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 793636#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 793632#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 793628#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 793624#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 793618#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 793603#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 793593#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 793591#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 793587#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 793586#L2000-2 assume !(0 == callOnFloor_~floorID#1); 793585#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 793581#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 793580#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 793579#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 793578#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 793577#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 793576#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 793555#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 792765#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 792582#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 792584#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 793573#L1034 assume !(0 != timeShift_~tmp___9~2#1); 793255#L1125 assume !(1 == ~doorState~0); 791418#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 791419#L476 assume !(1 == stopRequestedInDirection_~dir#1); 793196#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 792682#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 791513#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 791514#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 793559#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 793575#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 791509#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 791510#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 793021#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 791661#L852-2 assume !(1 == ~currentHeading~0); 791662#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 791760#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 792537#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 792714#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 792823#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 792824#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 793072#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 792211#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 791758#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 791857#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 791757#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 792662#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 793461#L1637-2 [2024-11-19 14:49:29,610 INFO L747 eck$LassoCheckResult]: Loop: 793461#L1637-2 assume !false; 806200#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 806201#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 806196#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 806197#L1645 assume 1 != cleanup_~tmp___0~6#1; 806192#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 806193#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 806086#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 806087#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 800177#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 800179#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 800169#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 800167#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 800146#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 800136#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 800131#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 800132#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 805977#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 805978#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 806298#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 809688#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 809689#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 809693#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 809691#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 809690#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 809687#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 809684#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 793350#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 792580#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 792581#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 793290#L645-2 assume !(0 == ~currentFloorID~0); 793545#L651-2 assume ~currentFloorID~0 > 0; 792959#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 792960#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 796042#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 796036#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 796009#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 796000#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 795993#L852-3 assume !(1 == ~currentHeading~0); 795986#L862-9 assume !(0 == ~currentFloorID~0); 795976#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 795971#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 795970#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 795968#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 795969#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 800079#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 800078#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 794267#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 794262#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 794203#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 794204#L1637-2 assume !false; 794199#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 794200#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 794189#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 794190#L1645 assume 1 != cleanup_~tmp___0~6#1; 794170#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 794171#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 794163#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 794164#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 794158#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 794157#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 794155#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 794151#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 794152#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 794128#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 794129#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 794118#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 794119#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 794116#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 794115#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 794114#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 794113#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 794111#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 794110#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 794109#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 794108#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 794107#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 794106#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 791664#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 791665#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 792913#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 799783#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 799784#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 799608#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 792038#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 791752#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 792105#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 792106#L852-5 assume !(1 == ~currentHeading~0); 791700#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 791701#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 792763#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 792764#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 806332#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 806331#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 806330#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 806329#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 806328#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 806214#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 806208#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 806204#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 793461#L1637-2 [2024-11-19 14:49:29,610 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:29,610 INFO L85 PathProgramCache]: Analyzing trace with hash 1242920289, now seen corresponding path program 1 times [2024-11-19 14:49:29,610 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:29,610 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [975088523] [2024-11-19 14:49:29,611 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:29,611 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:29,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:29,995 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:29,995 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:29,995 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [975088523] [2024-11-19 14:49:29,995 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [975088523] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:29,995 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:29,996 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:29,996 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [696521113] [2024-11-19 14:49:29,996 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:29,996 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:29,996 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:29,996 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 4 times [2024-11-19 14:49:29,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:29,997 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [693234233] [2024-11-19 14:49:29,997 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-11-19 14:49:29,997 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:30,013 INFO L227 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-11-19 14:49:30,013 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:30,073 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:49:30,074 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:30,074 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [693234233] [2024-11-19 14:49:30,074 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [693234233] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:30,074 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:30,074 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:30,074 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [108960269] [2024-11-19 14:49:30,074 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:30,075 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:30,075 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:30,075 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-19 14:49:30,075 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-19 14:49:30,075 INFO L87 Difference]: Start difference. First operand 26501 states and 48989 transitions. cyclomatic complexity: 22489 Second operand has 7 states, 7 states have (on average 11.285714285714286) internal successors, (79), 7 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:30,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:30,302 INFO L93 Difference]: Finished difference Result 26505 states and 48992 transitions. [2024-11-19 14:49:30,302 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26505 states and 48992 transitions. [2024-11-19 14:49:30,409 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:30,475 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26505 states to 26505 states and 48992 transitions. [2024-11-19 14:49:30,475 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26505 [2024-11-19 14:49:30,497 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26505 [2024-11-19 14:49:30,497 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26505 states and 48992 transitions. [2024-11-19 14:49:30,515 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:30,515 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26505 states and 48992 transitions. [2024-11-19 14:49:30,530 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26505 states and 48992 transitions. [2024-11-19 14:49:30,683 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26505 to 26505. [2024-11-19 14:49:30,706 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26505 states, 26505 states have (on average 1.8484059611394077) internal successors, (48992), 26504 states have internal predecessors, (48992), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:30,745 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26505 states to 26505 states and 48992 transitions. [2024-11-19 14:49:30,745 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26505 states and 48992 transitions. [2024-11-19 14:49:30,745 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-19 14:49:30,746 INFO L425 stractBuchiCegarLoop]: Abstraction has 26505 states and 48992 transitions. [2024-11-19 14:49:30,746 INFO L332 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2024-11-19 14:49:30,746 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26505 states and 48992 transitions. [2024-11-19 14:49:30,989 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:30,989 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:30,989 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:30,992 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:30,992 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:30,992 INFO L745 eck$LassoCheckResult]: Stem: 844620#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 844621#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 845645#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 845200#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 845201#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 845022#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 845023#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 846229#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 845447#L3030 assume !(0 == getOrigin_~person#1); 845448#L3034 assume !(1 == getOrigin_~person#1); 845614#L3038 assume !(2 == getOrigin_~person#1); 845083#L3042 assume !(3 == getOrigin_~person#1); 845084#L3046 assume !(4 == getOrigin_~person#1); 846029#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 844644#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 844645#L2208 assume !(0 == initPersonOnFloor_~floor#1); 845877#L2235 assume 1 == initPersonOnFloor_~floor#1; 845665#L2236 assume !(0 == initPersonOnFloor_~person#1); 845666#L2239 assume !(1 == initPersonOnFloor_~person#1); 845755#L2242 assume !(2 == initPersonOnFloor_~person#1); 845756#L2245 assume !(3 == initPersonOnFloor_~person#1); 846409#L2248 assume !(4 == initPersonOnFloor_~person#1); 846428#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 844911#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 844912#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 845828#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 845987#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 846324#L2000 assume !(0 == callOnFloor_~floorID#1); 846325#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 845182#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 846613#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 846612#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 846611#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 846609#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 846607#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 846586#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 846598#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 846592#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 846576#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 846567#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 846563#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 846561#L3164-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 846556#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 846555#L2000-2 assume !(0 == callOnFloor_~floorID#1); 846554#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 846550#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 846549#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 846548#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 846547#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 846546#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 846545#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 846536#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 845774#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 845595#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 845596#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 846543#L1034 assume !(0 != timeShift_~tmp___9~2#1); 846265#L1125 assume !(1 == ~doorState~0); 844439#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 844440#L476 assume !(1 == stopRequestedInDirection_~dir#1); 846204#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 845689#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 844531#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 844532#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 846537#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 846544#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 844524#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 844525#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 846040#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 844678#L852-2 assume !(1 == ~currentHeading~0); 844679#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 844773#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 845551#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 845721#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 845835#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 845836#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 846087#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 845223#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 844771#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 845335#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 844770#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 846446#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 846447#L1637-2 [2024-11-19 14:49:30,992 INFO L747 eck$LassoCheckResult]: Loop: 846447#L1637-2 assume !false; 867878#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 867877#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 867876#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 867875#L1645 assume 1 != cleanup_~tmp___0~6#1; 867874#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 867873#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 867872#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 867870#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 867868#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 867869#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 870702#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 870699#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 870698#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 870689#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 870688#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 870687#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 870686#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 870384#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 845894#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 845242#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 845244#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 859236#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 859229#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 859223#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 859218#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 849189#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 849187#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 849186#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 849184#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 844681#L645-2 assume !(0 == ~currentFloorID~0); 844682#L651-2 assume ~currentFloorID~0 > 0; 845974#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 845975#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 848897#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 848896#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 848869#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 848860#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 848853#L852-3 assume !(1 == ~currentHeading~0); 848846#L862-9 assume !(0 == ~currentFloorID~0); 848836#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 848831#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 848832#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 848708#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 848709#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 853101#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 853100#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 848679#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 848674#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 847095#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 847096#L1637-2 assume !false; 847091#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 847092#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 847087#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 847088#L1645 assume 1 != cleanup_~tmp___0~6#1; 847083#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 847084#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 847079#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 847080#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 847074#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 847073#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 847068#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 847050#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 847051#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 847030#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 847031#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 847026#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 847027#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 847024#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 847023#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 847022#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 847021#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 847019#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 847018#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 847016#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 847014#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 847002#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 846983#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 846970#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 846960#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 846956#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 846954#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 846953#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 846952#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 845053#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 844765#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 852875#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 845793#L852-5 assume !(1 == ~currentHeading~0); 845795#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 845270#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 845771#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 845772#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 867903#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 867902#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 856212#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 856209#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 856211#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 867887#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 867880#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 867879#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 846447#L1637-2 [2024-11-19 14:49:30,993 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:30,993 INFO L85 PathProgramCache]: Analyzing trace with hash 48713513, now seen corresponding path program 1 times [2024-11-19 14:49:30,993 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:30,993 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [506404639] [2024-11-19 14:49:30,993 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:30,994 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:31,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:31,052 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:31,052 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:31,052 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [506404639] [2024-11-19 14:49:31,052 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [506404639] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:31,052 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:31,052 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:31,052 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1775546158] [2024-11-19 14:49:31,052 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:31,053 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:31,053 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:31,053 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 5 times [2024-11-19 14:49:31,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:31,053 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1211351774] [2024-11-19 14:49:31,053 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-11-19 14:49:31,053 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:31,073 INFO L227 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:49:31,073 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:31,119 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:49:31,119 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:31,119 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1211351774] [2024-11-19 14:49:31,119 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1211351774] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:31,119 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:31,120 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:31,120 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1996695799] [2024-11-19 14:49:31,120 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:31,120 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:31,120 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:31,121 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-19 14:49:31,121 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-19 14:49:31,121 INFO L87 Difference]: Start difference. First operand 26505 states and 48992 transitions. cyclomatic complexity: 22488 Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:31,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:31,227 INFO L93 Difference]: Finished difference Result 26473 states and 48940 transitions. [2024-11-19 14:49:31,227 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26473 states and 48940 transitions. [2024-11-19 14:49:31,361 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:31,460 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26473 states to 26473 states and 48940 transitions. [2024-11-19 14:49:31,460 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26473 [2024-11-19 14:49:31,486 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26473 [2024-11-19 14:49:31,487 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26473 states and 48940 transitions. [2024-11-19 14:49:31,505 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:31,505 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26473 states and 48940 transitions. [2024-11-19 14:49:31,520 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26473 states and 48940 transitions. [2024-11-19 14:49:31,675 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26473 to 26473. [2024-11-19 14:49:31,697 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26473 states, 26473 states have (on average 1.8486760095191328) internal successors, (48940), 26472 states have internal predecessors, (48940), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:31,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26473 states to 26473 states and 48940 transitions. [2024-11-19 14:49:31,735 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26473 states and 48940 transitions. [2024-11-19 14:49:31,736 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-19 14:49:31,736 INFO L425 stractBuchiCegarLoop]: Abstraction has 26473 states and 48940 transitions. [2024-11-19 14:49:31,736 INFO L332 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2024-11-19 14:49:31,737 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26473 states and 48940 transitions. [2024-11-19 14:49:31,807 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:31,808 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:31,808 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:31,811 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:31,811 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:31,812 INFO L745 eck$LassoCheckResult]: Stem: 897608#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 897609#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 898643#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 898201#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 898202#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 898015#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 898016#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 899225#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 898443#L3030 assume !(0 == getOrigin_~person#1); 898444#L3034 assume !(1 == getOrigin_~person#1); 898612#L3038 assume !(2 == getOrigin_~person#1); 898081#L3042 assume !(3 == getOrigin_~person#1); 898082#L3046 assume !(4 == getOrigin_~person#1); 899020#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 897633#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 897634#L2208 assume !(0 == initPersonOnFloor_~floor#1); 898870#L2235 assume 1 == initPersonOnFloor_~floor#1; 898663#L2236 assume !(0 == initPersonOnFloor_~person#1); 898664#L2239 assume !(1 == initPersonOnFloor_~person#1); 898751#L2242 assume !(2 == initPersonOnFloor_~person#1); 898752#L2245 assume !(3 == initPersonOnFloor_~person#1); 899422#L2248 assume !(4 == initPersonOnFloor_~person#1); 899446#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 897899#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 897900#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 898821#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 898977#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 899333#L2000 assume !(0 == callOnFloor_~floorID#1); 899334#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 898182#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 899614#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 899613#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 899612#L3030-1 assume !(0 == getOrigin_~person#1); 899611#L3034-1 assume !(1 == getOrigin_~person#1); 899610#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 899609#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 899608#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 899607#L2235-1 assume 1 == initPersonOnFloor_~floor#1; 898984#L2236-2 assume !(0 == initPersonOnFloor_~person#1); 898985#L2239-2 assume !(1 == initPersonOnFloor_~person#1); 898439#L2242-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 897652#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 899563#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 899598#L3164-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 899594#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 899593#L2000-2 assume !(0 == callOnFloor_~floorID#1); 899592#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 899588#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 899587#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 899586#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 899585#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 899584#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 899583#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 899560#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 898770#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 898594#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 898596#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 899581#L1034 assume !(0 != timeShift_~tmp___9~2#1); 899262#L1125 assume !(1 == ~doorState~0); 897426#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 897427#L476 assume !(1 == stopRequestedInDirection_~dir#1); 899202#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 898688#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 897520#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 897521#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 899562#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 899582#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 897513#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 897514#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 899033#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 897668#L852-2 assume !(1 == ~currentHeading~0); 897669#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 897765#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 898548#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 898720#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 898826#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 898827#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 899087#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 905079#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 905084#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 905082#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 905076#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 899466#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 899467#L1637-2 [2024-11-19 14:49:31,812 INFO L747 eck$LassoCheckResult]: Loop: 899467#L1637-2 assume !false; 906380#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 906376#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 906374#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 906372#L1645 assume 1 != cleanup_~tmp___0~6#1; 906371#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 906364#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 906362#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 906253#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 906250#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 906252#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 907861#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 907847#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 907845#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 907833#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 907831#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 907829#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 907828#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 907826#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 907823#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 907822#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 907821#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 907818#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 907816#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 907814#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 907811#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 907810#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 902356#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 902355#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 902354#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 901459#L645-2 assume !(0 == ~currentFloorID~0); 901456#L651-2 assume ~currentFloorID~0 > 0; 901454#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 901455#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 901457#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 901458#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 902109#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 901850#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 901825#L852-3 assume !(1 == ~currentHeading~0); 901818#L862-9 assume !(0 == ~currentFloorID~0); 901808#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 901803#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 901802#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 901801#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 901798#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 901799#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 901800#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 900141#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 900132#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 900099#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 900098#L1637-2 assume !false; 900097#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 900096#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 900095#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 900094#L1645 assume 1 != cleanup_~tmp___0~6#1; 900093#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 900092#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 900091#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 900089#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 900087#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 900086#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 900084#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 900082#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 900063#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 900052#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 900050#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 900051#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 905912#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 900047#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 900046#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 900045#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 900044#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 900042#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 900041#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 900040#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 900039#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 900038#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 900037#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 897671#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 897448#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 898228#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 897546#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 897548#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 899404#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 904901#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 897758#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 898116#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 898117#L852-5 assume !(1 == ~currentHeading~0); 898789#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 898271#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 898767#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 898768#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 906783#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 906781#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 906780#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 906776#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 906772#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 906769#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 906768#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 906413#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 899467#L1637-2 [2024-11-19 14:49:31,812 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:31,812 INFO L85 PathProgramCache]: Analyzing trace with hash 1146195918, now seen corresponding path program 1 times [2024-11-19 14:49:31,812 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:31,812 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [991854712] [2024-11-19 14:49:31,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:31,813 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:31,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:31,903 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:31,904 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:31,904 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [991854712] [2024-11-19 14:49:31,904 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [991854712] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:31,904 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:31,904 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:31,904 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1617879587] [2024-11-19 14:49:31,905 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:31,905 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:31,905 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:31,905 INFO L85 PathProgramCache]: Analyzing trace with hash 797598812, now seen corresponding path program 5 times [2024-11-19 14:49:31,905 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:31,906 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [876315400] [2024-11-19 14:49:31,906 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-11-19 14:49:31,906 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:31,921 INFO L227 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:49:31,922 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:32,145 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:49:32,145 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:32,145 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [876315400] [2024-11-19 14:49:32,146 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [876315400] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:32,146 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:32,146 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:32,146 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [238378163] [2024-11-19 14:49:32,146 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:32,146 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:32,147 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:32,147 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:32,147 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:32,147 INFO L87 Difference]: Start difference. First operand 26473 states and 48940 transitions. cyclomatic complexity: 22468 Second operand has 5 states, 5 states have (on average 16.6) internal successors, (83), 5 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:32,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:32,311 INFO L93 Difference]: Finished difference Result 26461 states and 48922 transitions. [2024-11-19 14:49:32,311 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26461 states and 48922 transitions. [2024-11-19 14:49:32,440 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:32,523 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26461 states to 26461 states and 48922 transitions. [2024-11-19 14:49:32,523 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26461 [2024-11-19 14:49:32,547 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26461 [2024-11-19 14:49:32,547 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26461 states and 48922 transitions. [2024-11-19 14:49:32,568 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:32,568 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26461 states and 48922 transitions. [2024-11-19 14:49:32,584 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26461 states and 48922 transitions. [2024-11-19 14:49:32,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26461 to 26461. [2024-11-19 14:49:32,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26461 states, 26461 states have (on average 1.8488341332527116) internal successors, (48922), 26460 states have internal predecessors, (48922), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:32,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26461 states to 26461 states and 48922 transitions. [2024-11-19 14:49:32,883 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26461 states and 48922 transitions. [2024-11-19 14:49:32,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-19 14:49:32,884 INFO L425 stractBuchiCegarLoop]: Abstraction has 26461 states and 48922 transitions. [2024-11-19 14:49:32,884 INFO L332 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2024-11-19 14:49:32,884 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26461 states and 48922 transitions. [2024-11-19 14:49:32,971 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:32,971 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:32,972 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:32,976 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:32,976 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:32,977 INFO L745 eck$LassoCheckResult]: Stem: 950555#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 950556#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 951607#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 951152#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 951153#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 950970#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 950971#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 952207#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 951403#L3030 assume !(0 == getOrigin_~person#1); 951404#L3034 assume !(1 == getOrigin_~person#1); 951575#L3038 assume !(2 == getOrigin_~person#1); 951036#L3042 assume !(3 == getOrigin_~person#1); 951037#L3046 assume !(4 == getOrigin_~person#1); 951994#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 950580#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 950581#L2208 assume !(0 == initPersonOnFloor_~floor#1); 951843#L2235 assume 1 == initPersonOnFloor_~floor#1; 951627#L2236 assume !(0 == initPersonOnFloor_~person#1); 951628#L2239 assume !(1 == initPersonOnFloor_~person#1); 951721#L2242 assume !(2 == initPersonOnFloor_~person#1); 951722#L2245 assume !(3 == initPersonOnFloor_~person#1); 952422#L2248 assume !(4 == initPersonOnFloor_~person#1); 952448#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 950853#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 950854#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 951796#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 951955#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 952316#L2000 assume !(0 == callOnFloor_~floorID#1); 952317#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 951133#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 952634#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 950963#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 950964#L3030-1 assume !(0 == getOrigin_~person#1); 952633#L3034-1 assume !(1 == getOrigin_~person#1); 952632#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 950907#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 950792#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 950793#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 952629#L2262-1 assume !(2 == initPersonOnFloor_~floor#1); 951476#L2289-1 assume !(3 == initPersonOnFloor_~floor#1); 951478#L2316-2 assume !(4 == initPersonOnFloor_~floor#1); 952624#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 952623#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 952622#L3164-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 952618#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 952617#L2000-2 assume !(0 == callOnFloor_~floorID#1); 952616#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 952612#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 952611#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 952610#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 952609#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 952608#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 952607#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 952582#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 951739#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 951558#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 951559#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 952605#L1034 assume !(0 != timeShift_~tmp___9~2#1); 952243#L1125 assume !(1 == ~doorState~0); 950374#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 950375#L476 assume !(1 == stopRequestedInDirection_~dir#1); 952183#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 951653#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 950466#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 950467#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 952587#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 952606#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 950459#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 950460#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 952008#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 950615#L852-2 assume !(1 == ~currentHeading~0); 950616#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 950713#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 951509#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 951687#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 951801#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 951802#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 952061#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 951177#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 950711#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 951290#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 950710#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 952473#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 952474#L1637-2 [2024-11-19 14:49:32,977 INFO L747 eck$LassoCheckResult]: Loop: 952474#L1637-2 assume !false; 959118#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 959119#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 959114#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 959115#L1645 assume 1 != cleanup_~tmp___0~6#1; 959110#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 959111#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 959106#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 959107#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 959096#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 959098#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 959092#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 959076#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 959069#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 959059#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 962096#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 962097#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 962090#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 962091#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 965240#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 972635#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 972636#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 972640#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 972638#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 972637#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 972634#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 972631#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 952352#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 952353#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 955118#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 955119#L645-2 assume !(0 == ~currentFloorID~0); 952842#L651-2 assume ~currentFloorID~0 > 0; 952838#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 952839#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 952494#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 952495#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 954963#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 954964#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 955170#L852-3 assume !(1 == ~currentHeading~0); 955166#L862-9 assume !(0 == ~currentFloorID~0); 955163#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 954752#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 954751#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 954750#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 954747#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 954748#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 954749#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 953089#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 953080#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 953047#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 953046#L1637-2 assume !false; 953045#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 953044#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 953043#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 953042#L1645 assume 1 != cleanup_~tmp___0~6#1; 953041#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 953040#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 953039#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 953036#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 953038#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 953031#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 953032#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 959010#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 959009#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 952989#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 952990#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 952985#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 952986#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 952983#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 952982#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 952981#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 952980#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 952977#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 952975#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 952958#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 952957#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 952956#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 952942#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 952929#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 952919#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 952882#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 952880#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 952878#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 952876#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 952875#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 952856#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 952854#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 952853#L852-5 assume !(1 == ~currentHeading~0); 952851#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 952852#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 951736#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 951737#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 962182#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 962183#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 962178#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 959136#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 959129#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 959125#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 959126#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 959122#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 952474#L1637-2 [2024-11-19 14:49:32,978 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:32,978 INFO L85 PathProgramCache]: Analyzing trace with hash -883037106, now seen corresponding path program 1 times [2024-11-19 14:49:32,978 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:32,979 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [358555141] [2024-11-19 14:49:32,979 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:32,979 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:32,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:33,063 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:33,064 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:33,064 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [358555141] [2024-11-19 14:49:33,064 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [358555141] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:33,064 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:33,064 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:33,064 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [640475827] [2024-11-19 14:49:33,064 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:33,065 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:33,065 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:33,065 INFO L85 PathProgramCache]: Analyzing trace with hash 797598812, now seen corresponding path program 6 times [2024-11-19 14:49:33,066 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:33,066 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1666580792] [2024-11-19 14:49:33,066 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-11-19 14:49:33,066 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:33,088 INFO L227 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 1 check-sat command(s) [2024-11-19 14:49:33,088 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:33,182 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-19 14:49:33,183 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:33,183 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1666580792] [2024-11-19 14:49:33,183 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1666580792] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:33,183 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:33,183 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:33,183 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1474547398] [2024-11-19 14:49:33,184 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:33,184 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:33,184 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:33,184 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:33,184 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:33,185 INFO L87 Difference]: Start difference. First operand 26461 states and 48922 transitions. cyclomatic complexity: 22462 Second operand has 4 states, 4 states have (on average 20.75) internal successors, (83), 4 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:33,335 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:33,335 INFO L93 Difference]: Finished difference Result 26433 states and 48880 transitions. [2024-11-19 14:49:33,336 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26433 states and 48880 transitions. [2024-11-19 14:49:33,655 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:33,707 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26433 states to 26433 states and 48880 transitions. [2024-11-19 14:49:33,707 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26433 [2024-11-19 14:49:33,726 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26433 [2024-11-19 14:49:33,726 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26433 states and 48880 transitions. [2024-11-19 14:49:33,740 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:33,740 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26433 states and 48880 transitions. [2024-11-19 14:49:33,754 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26433 states and 48880 transitions. [2024-11-19 14:49:33,910 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26433 to 26433. [2024-11-19 14:49:33,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26433 states, 26433 states have (on average 1.849203646956456) internal successors, (48880), 26432 states have internal predecessors, (48880), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:33,971 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26433 states to 26433 states and 48880 transitions. [2024-11-19 14:49:33,971 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26433 states and 48880 transitions. [2024-11-19 14:49:33,971 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:33,971 INFO L425 stractBuchiCegarLoop]: Abstraction has 26433 states and 48880 transitions. [2024-11-19 14:49:33,971 INFO L332 stractBuchiCegarLoop]: ======== Iteration 27 ============ [2024-11-19 14:49:33,972 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26433 states and 48880 transitions. [2024-11-19 14:49:34,039 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:34,039 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:34,040 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:34,042 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:34,042 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:34,043 INFO L745 eck$LassoCheckResult]: Stem: 1003462#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1003463#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1004490#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1004048#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1004049#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1003869#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1003870#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1005064#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1004290#L3030 assume !(0 == getOrigin_~person#1); 1004291#L3034 assume !(1 == getOrigin_~person#1); 1004453#L3038 assume !(2 == getOrigin_~person#1); 1003934#L3042 assume !(3 == getOrigin_~person#1); 1003935#L3046 assume !(4 == getOrigin_~person#1); 1004860#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1003485#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1003486#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1004718#L2235 assume 1 == initPersonOnFloor_~floor#1; 1004508#L2236 assume !(0 == initPersonOnFloor_~person#1); 1004509#L2239 assume !(1 == initPersonOnFloor_~person#1); 1004599#L2242 assume !(2 == initPersonOnFloor_~person#1); 1004600#L2245 assume !(3 == initPersonOnFloor_~person#1); 1005255#L2248 assume !(4 == initPersonOnFloor_~person#1); 1005280#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1003754#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1003755#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1004670#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1004821#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1005160#L2000 assume !(0 == callOnFloor_~floorID#1); 1005162#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1003798#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1003799#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1003862#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1003863#L3030-1 assume !(0 == getOrigin_~person#1); 1005303#L3034-1 assume !(1 == getOrigin_~person#1); 1005304#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1003810#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1003694#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1003695#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1005238#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1005239#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1005114#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1005115#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1005434#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1005433#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1005432#L3164-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1003699#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1003700#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1005428#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1005424#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1005423#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1005422#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1005421#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1005420#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1005419#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1005399#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1004617#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1004435#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1004436#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1005417#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1005096#L1125 assume !(1 == ~doorState~0); 1003279#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1003280#L476 assume !(1 == stopRequestedInDirection_~dir#1); 1005040#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1004532#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1003370#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1003371#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1005401#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1005418#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1003366#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1003367#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1004872#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1003520#L852-2 assume !(1 == ~currentHeading~0); 1003521#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1003616#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1004389#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1004564#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1004675#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1004676#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1004922#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1004071#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1003614#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1003714#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1003613#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1004514#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1005307#L1637-2 [2024-11-19 14:49:34,043 INFO L747 eck$LassoCheckResult]: Loop: 1005307#L1637-2 assume !false; 1011941#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1011942#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1011937#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1011938#L1645 assume 1 != cleanup_~tmp___0~6#1; 1011933#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1011934#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1011929#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1011930#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1011924#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1011923#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1011918#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1011916#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1011894#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1011884#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1011879#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1011880#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1011846#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1011847#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1022692#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1022689#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1022690#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1022694#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1022691#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1022688#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1022686#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1022679#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1006311#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1006309#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1006306#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1006307#L645-2 assume !(0 == ~currentFloorID~0); 1006344#L651-2 assume ~currentFloorID~0 > 0; 1005852#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1005853#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1005856#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 1005857#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1006247#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1006244#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1005902#L852-3 assume !(1 == ~currentHeading~0); 1010410#L862-9 assume !(0 == ~currentFloorID~0); 1010408#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1006085#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1006083#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1006084#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1006080#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1006076#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1006072#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1006073#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1006039#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1006040#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1006005#L1637-2 assume !false; 1006006#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1006001#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1006002#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1005997#L1645 assume 1 != cleanup_~tmp___0~6#1; 1005998#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1005993#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1005994#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1005988#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1005990#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1005983#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1005984#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1005963#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1005964#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1005922#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1005923#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1005918#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1005919#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1005915#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1005914#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1005913#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1005912#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1005910#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1005905#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1005903#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1005188#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1004433#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1004434#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1003523#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1003502#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1011295#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1003396#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1003398#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1005237#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1003902#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1003903#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1004747#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1004636#L852-5 assume !(1 == ~currentHeading~0); 1004638#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1011802#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1004615#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1004616#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1014190#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1014185#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1014186#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1018074#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1018075#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 1011958#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1011949#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1011945#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1005307#L1637-2 [2024-11-19 14:49:34,043 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:34,044 INFO L85 PathProgramCache]: Analyzing trace with hash 301983347, now seen corresponding path program 1 times [2024-11-19 14:49:34,044 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:34,044 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [287706050] [2024-11-19 14:49:34,044 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:34,044 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:34,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:34,147 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:34,148 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:34,148 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [287706050] [2024-11-19 14:49:34,148 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [287706050] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:34,148 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:34,148 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-19 14:49:34,149 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [95667336] [2024-11-19 14:49:34,149 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:34,151 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:34,151 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:34,151 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 6 times [2024-11-19 14:49:34,151 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:34,151 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2052191823] [2024-11-19 14:49:34,152 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-11-19 14:49:34,152 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:34,168 INFO L227 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 1 check-sat command(s) [2024-11-19 14:49:34,169 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:34,199 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-11-19 14:49:34,199 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:34,199 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2052191823] [2024-11-19 14:49:34,200 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2052191823] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:34,200 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:34,200 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:34,200 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1936308091] [2024-11-19 14:49:34,200 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:34,201 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:34,202 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:34,202 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-19 14:49:34,202 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-19 14:49:34,202 INFO L87 Difference]: Start difference. First operand 26433 states and 48880 transitions. cyclomatic complexity: 22448 Second operand has 6 states, 6 states have (on average 14.0) internal successors, (84), 6 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:34,340 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:34,340 INFO L93 Difference]: Finished difference Result 26433 states and 48878 transitions. [2024-11-19 14:49:34,340 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26433 states and 48878 transitions. [2024-11-19 14:49:34,434 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:34,505 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26433 states to 26433 states and 48878 transitions. [2024-11-19 14:49:34,505 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26433 [2024-11-19 14:49:34,527 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26433 [2024-11-19 14:49:34,527 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26433 states and 48878 transitions. [2024-11-19 14:49:34,543 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:34,544 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26433 states and 48878 transitions. [2024-11-19 14:49:34,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26433 states and 48878 transitions. [2024-11-19 14:49:35,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26433 to 26433. [2024-11-19 14:49:35,045 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26433 states, 26433 states have (on average 1.8491279839594446) internal successors, (48878), 26432 states have internal predecessors, (48878), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:35,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26433 states to 26433 states and 48878 transitions. [2024-11-19 14:49:35,085 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26433 states and 48878 transitions. [2024-11-19 14:49:35,085 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-19 14:49:35,086 INFO L425 stractBuchiCegarLoop]: Abstraction has 26433 states and 48878 transitions. [2024-11-19 14:49:35,086 INFO L332 stractBuchiCegarLoop]: ======== Iteration 28 ============ [2024-11-19 14:49:35,086 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26433 states and 48878 transitions. [2024-11-19 14:49:35,157 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:35,158 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:35,158 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:35,161 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:35,161 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:35,162 INFO L745 eck$LassoCheckResult]: Stem: 1056337#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1056338#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1057354#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1056916#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1056917#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1056741#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1056742#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1057925#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1057160#L3030 assume !(0 == getOrigin_~person#1); 1057161#L3034 assume !(1 == getOrigin_~person#1); 1057319#L3038 assume !(2 == getOrigin_~person#1); 1056803#L3042 assume !(3 == getOrigin_~person#1); 1056804#L3046 assume !(4 == getOrigin_~person#1); 1057721#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1056363#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1056364#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1057580#L2235 assume 1 == initPersonOnFloor_~floor#1; 1057372#L2236 assume !(0 == initPersonOnFloor_~person#1); 1057373#L2239 assume !(1 == initPersonOnFloor_~person#1); 1057464#L2242 assume !(2 == initPersonOnFloor_~person#1); 1057465#L2245 assume !(3 == initPersonOnFloor_~person#1); 1058122#L2248 assume !(4 == initPersonOnFloor_~person#1); 1058145#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1056626#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1056627#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1057534#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1057683#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1058024#L2000 assume !(0 == callOnFloor_~floorID#1); 1058026#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1056671#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1056672#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1056734#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1056735#L3030-1 assume !(0 == getOrigin_~person#1); 1058165#L3034-1 assume !(1 == getOrigin_~person#1); 1058166#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1056683#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1056568#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1056569#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1058104#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1058105#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1057978#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1057979#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1058296#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1058295#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1058294#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1058292#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1056573#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1056574#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1058290#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1058286#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1058285#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1058284#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1058283#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1058282#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1058281#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1058265#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1057482#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1057300#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1057302#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1058278#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1057959#L1125 assume !(1 == ~doorState~0); 1056157#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1056158#L476 assume !(1 == stopRequestedInDirection_~dir#1); 1057895#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1057396#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1056249#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1056250#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1058266#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1058280#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1056245#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1056246#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1057732#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1056397#L852-2 assume !(1 == ~currentHeading~0); 1056398#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1056490#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1057256#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1057430#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1057539#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1057540#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1057777#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1057905#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1056588#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1056589#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1064624#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1058170#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1058171#L1637-2 [2024-11-19 14:49:35,162 INFO L747 eck$LassoCheckResult]: Loop: 1058171#L1637-2 assume !false; 1064823#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1064824#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1064819#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1064820#L1645 assume 1 != cleanup_~tmp___0~6#1; 1064814#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1064815#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1064810#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1064811#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1064803#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1064805#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1064799#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1064797#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1064774#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1064764#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1064759#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1064760#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1067720#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1067721#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1070944#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1079636#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1079637#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1079640#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1079638#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1079635#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1079633#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1079626#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1063428#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1063427#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1063425#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1063426#L645-2 assume !(0 == ~currentFloorID~0); 1063453#L651-2 assume ~currentFloorID~0 > 0; 1063452#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1056595#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1056596#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 1058189#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1060626#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1060618#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1060611#L852-3 assume !(1 == ~currentHeading~0); 1060604#L862-9 assume !(0 == ~currentFloorID~0); 1060594#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1060589#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1060588#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1060585#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1060584#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1060580#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1060581#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1058864#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1058855#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1058822#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1058821#L1637-2 assume !false; 1058820#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1058819#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1058818#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1058817#L1645 assume 1 != cleanup_~tmp___0~6#1; 1058816#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1058815#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1058814#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1058812#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1058810#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1058808#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1058809#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1058782#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1058783#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1058762#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1058763#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1058757#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1058758#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1058753#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1058752#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1058751#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1058750#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1058748#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1058747#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1058745#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1058058#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1057298#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1057299#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1056400#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1056181#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1056943#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1056275#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1056277#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1064496#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1056773#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1056774#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1064508#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1064506#L852-5 assume !(1 == ~currentHeading~0); 1064505#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1056986#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1057480#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1057481#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1067810#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1067811#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1067807#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1064841#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1064834#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1064830#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1064831#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1064827#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1058171#L1637-2 [2024-11-19 14:49:35,163 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:35,163 INFO L85 PathProgramCache]: Analyzing trace with hash 1269394631, now seen corresponding path program 1 times [2024-11-19 14:49:35,163 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:35,163 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1607764779] [2024-11-19 14:49:35,163 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:35,164 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:35,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:35,273 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:35,273 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:35,274 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1607764779] [2024-11-19 14:49:35,274 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1607764779] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:35,274 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:35,274 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-19 14:49:35,274 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1182080422] [2024-11-19 14:49:35,274 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:35,275 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:35,275 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:35,275 INFO L85 PathProgramCache]: Analyzing trace with hash 797598812, now seen corresponding path program 7 times [2024-11-19 14:49:35,276 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:35,276 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1681470140] [2024-11-19 14:49:35,276 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-11-19 14:49:35,276 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:35,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:35,351 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:49:35,352 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:35,352 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1681470140] [2024-11-19 14:49:35,352 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1681470140] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:35,352 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:35,352 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:35,352 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1468522323] [2024-11-19 14:49:35,353 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:35,353 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:35,353 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:35,353 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-19 14:49:35,353 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-19 14:49:35,353 INFO L87 Difference]: Start difference. First operand 26433 states and 48878 transitions. cyclomatic complexity: 22446 Second operand has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:35,508 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:35,508 INFO L93 Difference]: Finished difference Result 26433 states and 48876 transitions. [2024-11-19 14:49:35,508 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26433 states and 48876 transitions. [2024-11-19 14:49:35,608 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:35,676 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26433 states to 26433 states and 48876 transitions. [2024-11-19 14:49:35,676 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26433 [2024-11-19 14:49:35,698 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26433 [2024-11-19 14:49:35,698 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26433 states and 48876 transitions. [2024-11-19 14:49:35,716 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:35,716 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26433 states and 48876 transitions. [2024-11-19 14:49:35,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26433 states and 48876 transitions. [2024-11-19 14:49:36,249 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26433 to 26433. [2024-11-19 14:49:36,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26433 states, 26433 states have (on average 1.8490523209624332) internal successors, (48876), 26432 states have internal predecessors, (48876), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:36,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26433 states to 26433 states and 48876 transitions. [2024-11-19 14:49:36,329 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26433 states and 48876 transitions. [2024-11-19 14:49:36,342 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-19 14:49:36,343 INFO L425 stractBuchiCegarLoop]: Abstraction has 26433 states and 48876 transitions. [2024-11-19 14:49:36,343 INFO L332 stractBuchiCegarLoop]: ======== Iteration 29 ============ [2024-11-19 14:49:36,343 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26433 states and 48876 transitions. [2024-11-19 14:49:36,454 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23568 [2024-11-19 14:49:36,454 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:36,454 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:36,458 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:36,458 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:36,458 INFO L745 eck$LassoCheckResult]: Stem: 1109216#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1109217#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1110247#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1109808#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1109809#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1109628#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1109629#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1110832#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1110051#L3030 assume !(0 == getOrigin_~person#1); 1110052#L3034 assume !(1 == getOrigin_~person#1); 1110213#L3038 assume !(2 == getOrigin_~person#1); 1109691#L3042 assume !(3 == getOrigin_~person#1); 1109692#L3046 assume !(4 == getOrigin_~person#1); 1110630#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1109242#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1109243#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1110478#L2235 assume 1 == initPersonOnFloor_~floor#1; 1110267#L2236 assume !(0 == initPersonOnFloor_~person#1); 1110268#L2239 assume !(1 == initPersonOnFloor_~person#1); 1110359#L2242 assume !(2 == initPersonOnFloor_~person#1); 1110360#L2245 assume !(3 == initPersonOnFloor_~person#1); 1111018#L2248 assume !(4 == initPersonOnFloor_~person#1); 1111046#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1109509#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1109510#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1110430#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1110589#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1110931#L2000 assume !(0 == callOnFloor_~floorID#1); 1110932#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1109789#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1110345#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1110346#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1109261#L3030-1 assume !(0 == getOrigin_~person#1); 1109262#L3034-1 assume !(1 == getOrigin_~person#1); 1108950#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1108951#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1109448#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1109449#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1111002#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1111003#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1110886#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1110887#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1111191#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1109120#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1109121#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1109176#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1109453#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1109454#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1110760#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1110761#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1111185#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1111184#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1111183#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1111182#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1111181#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1111180#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1111160#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1110377#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1110198#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1110200#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1111178#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1110867#L1125 assume !(1 == ~doorState~0); 1109038#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1109039#L476 assume !(1 == stopRequestedInDirection_~dir#1); 1110809#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1110291#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1109129#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1109130#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1111161#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1111179#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1109122#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1109123#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1110641#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1109276#L852-2 assume !(1 == ~currentHeading~0); 1109277#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1109370#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1110153#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1110323#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1110435#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1110436#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1110691#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1109831#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1109368#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1109468#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1109367#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1111070#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1111071#L1637-2 [2024-11-19 14:49:36,459 INFO L747 eck$LassoCheckResult]: Loop: 1111071#L1637-2 assume !false; 1117697#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1117698#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1117693#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1117694#L1645 assume 1 != cleanup_~tmp___0~6#1; 1117689#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1117690#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1117685#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1117686#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1117679#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1117681#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1134230#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1134223#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1134221#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1134199#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1134197#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1134195#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1134193#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1134190#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1134185#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1134182#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1134183#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1134187#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1134184#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1134181#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1134179#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1134178#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1111579#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1111577#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1111578#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1111668#L645-2 assume !(0 == ~currentFloorID~0); 1111154#L651-2 assume ~currentFloorID~0 > 0; 1110575#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1110576#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1111664#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 1111665#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1113535#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1113527#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1113520#L852-3 assume !(1 == ~currentHeading~0); 1113513#L862-9 assume !(0 == ~currentFloorID~0); 1113503#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1113498#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1113496#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1113497#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1113492#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1112988#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1112979#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1112980#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1111774#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1111775#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1111740#L1637-2 assume !false; 1111741#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1111736#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1111737#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1111732#L1645 assume 1 != cleanup_~tmp___0~6#1; 1111733#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1111728#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1111729#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1111723#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1111725#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1111718#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1111719#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1111693#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1111694#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1111669#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1111670#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1111662#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1111663#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1111627#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1111626#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1111625#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1111624#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1111621#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1111615#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1111612#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1110955#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1110196#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1110197#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1109279#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1109060#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1109834#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1109835#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1117379#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1117378#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1109660#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1109661#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1109726#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1109727#L852-5 assume !(1 == ~currentHeading~0); 1110400#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1109878#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1110374#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1110375#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1120744#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1120745#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1120741#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1120739#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1120740#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 1117714#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1117705#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1117701#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1111071#L1637-2 [2024-11-19 14:49:36,459 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:36,459 INFO L85 PathProgramCache]: Analyzing trace with hash 2124053735, now seen corresponding path program 1 times [2024-11-19 14:49:36,460 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:36,460 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1471708553] [2024-11-19 14:49:36,460 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:36,460 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:36,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:36,506 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:36,507 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:36,507 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1471708553] [2024-11-19 14:49:36,507 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1471708553] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:36,507 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:36,507 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-19 14:49:36,507 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1120430628] [2024-11-19 14:49:36,507 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:36,507 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:36,507 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:36,508 INFO L85 PathProgramCache]: Analyzing trace with hash 307471514, now seen corresponding path program 7 times [2024-11-19 14:49:36,508 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:36,508 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [174764018] [2024-11-19 14:49:36,508 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-11-19 14:49:36,508 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:36,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:36,589 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:49:36,589 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:36,590 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [174764018] [2024-11-19 14:49:36,590 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [174764018] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:36,590 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:36,590 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:36,590 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [464306181] [2024-11-19 14:49:36,590 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:36,590 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:36,591 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:36,591 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-19 14:49:36,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-19 14:49:36,591 INFO L87 Difference]: Start difference. First operand 26433 states and 48876 transitions. cyclomatic complexity: 22444 Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 2 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:36,708 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:36,708 INFO L93 Difference]: Finished difference Result 26669 states and 49234 transitions. [2024-11-19 14:49:36,708 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26669 states and 49234 transitions. [2024-11-19 14:49:36,812 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23804 [2024-11-19 14:49:36,880 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26669 states to 26669 states and 49234 transitions. [2024-11-19 14:49:36,880 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26669 [2024-11-19 14:49:36,902 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26669 [2024-11-19 14:49:36,902 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26669 states and 49234 transitions. [2024-11-19 14:49:36,920 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:36,921 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26669 states and 49234 transitions. [2024-11-19 14:49:36,936 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26669 states and 49234 transitions. [2024-11-19 14:49:37,092 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26669 to 26624. [2024-11-19 14:49:37,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26624 states, 26624 states have (on average 1.8475060096153846) internal successors, (49188), 26623 states have internal predecessors, (49188), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:37,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26624 states to 26624 states and 49188 transitions. [2024-11-19 14:49:37,155 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26624 states and 49188 transitions. [2024-11-19 14:49:37,156 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-19 14:49:37,156 INFO L425 stractBuchiCegarLoop]: Abstraction has 26624 states and 49188 transitions. [2024-11-19 14:49:37,157 INFO L332 stractBuchiCegarLoop]: ======== Iteration 30 ============ [2024-11-19 14:49:37,157 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26624 states and 49188 transitions. [2024-11-19 14:49:37,232 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23759 [2024-11-19 14:49:37,232 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:37,232 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:37,236 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:37,236 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:37,236 INFO L745 eck$LassoCheckResult]: Stem: 1162331#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1162332#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1163342#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1162911#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1162912#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1162736#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1162737#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1163902#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1163150#L3030 assume !(0 == getOrigin_~person#1); 1163151#L3034 assume !(1 == getOrigin_~person#1); 1163309#L3038 assume !(2 == getOrigin_~person#1); 1162799#L3042 assume !(3 == getOrigin_~person#1); 1162800#L3046 assume !(4 == getOrigin_~person#1); 1163708#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1162356#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1162357#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1163570#L2235 assume 1 == initPersonOnFloor_~floor#1; 1163362#L2236 assume !(0 == initPersonOnFloor_~person#1); 1163363#L2239 assume !(1 == initPersonOnFloor_~person#1); 1163453#L2242 assume !(2 == initPersonOnFloor_~person#1); 1163454#L2245 assume !(3 == initPersonOnFloor_~person#1); 1164083#L2248 assume !(4 == initPersonOnFloor_~person#1); 1164101#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1162623#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1162624#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1163522#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1163671#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1163999#L2000 assume !(0 == callOnFloor_~floorID#1); 1164000#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1162893#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1163439#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1163440#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1162372#L3030-1 assume !(0 == getOrigin_~person#1); 1162373#L3034-1 assume !(1 == getOrigin_~person#1); 1162063#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1162064#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1162564#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1162565#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1164068#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1164069#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1163953#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1163954#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1164228#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1162234#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1162235#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1162291#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1162569#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1162570#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1163830#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1163831#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1164222#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1164221#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1164220#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1164219#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1164218#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1164217#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1164203#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1163471#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1163294#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1163295#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1164215#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1163937#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1162151#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1162152#L476 assume !(1 == stopRequestedInDirection_~dir#1); 1163878#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1163388#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1162243#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1162244#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1164208#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1164216#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1162236#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1162237#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1163721#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1162390#L852-2 assume !(1 == ~currentHeading~0); 1162391#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1162486#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1163246#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1163420#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1165482#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1165481#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165480#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165465#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165470#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165468#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165461#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1165460#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1165359#L1637-2 [2024-11-19 14:49:37,237 INFO L747 eck$LassoCheckResult]: Loop: 1165359#L1637-2 assume !false; 1165360#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1165350#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1165351#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1165236#L1645 assume 1 != cleanup_~tmp___0~6#1; 1165237#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1165220#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1165221#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1164744#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1164746#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1170882#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1170880#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1170873#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1170861#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1170850#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1170849#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1170848#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1170847#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1170842#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1170843#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1170846#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1170841#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1170827#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1170732#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1170660#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1169351#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1165645#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1165644#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1165642#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1165636#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1165634#L645-2 assume !(0 == ~currentFloorID~0); 1165633#L651-2 assume ~currentFloorID~0 > 0; 1165424#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1165425#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1165621#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 1165422#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1165423#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1165676#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1165674#L852-3 assume !(1 == ~currentHeading~0); 1165673#L862-9 assume !(0 == ~currentFloorID~0); 1165667#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1165510#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1165508#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1165506#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1165504#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1165502#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1165499#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1165492#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1165486#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1165458#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1165459#L1637-2 assume !false; 1165354#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1165355#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1165346#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1165347#L1645 assume 1 != cleanup_~tmp___0~6#1; 1165226#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1165227#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1165133#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1165134#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1165973#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1165970#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1165957#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1165941#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1165936#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1165924#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1165920#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1165917#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1165913#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1165910#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1165907#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1165900#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1165890#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1165879#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1165874#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1165870#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1165868#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1165729#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1165449#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1165450#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1165431#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1165919#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1165740#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1165912#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1165909#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1165589#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1165534#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1165532#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1165533#L852-5 assume !(1 == ~currentHeading~0); 1165734#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1165731#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1165514#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1165509#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1165507#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1165505#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165503#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165501#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1166007#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1166004#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1165483#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1165484#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1165359#L1637-2 [2024-11-19 14:49:37,237 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:37,237 INFO L85 PathProgramCache]: Analyzing trace with hash 1983505125, now seen corresponding path program 1 times [2024-11-19 14:49:37,237 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:37,237 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1852121258] [2024-11-19 14:49:37,237 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:37,238 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:37,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:37,303 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:37,303 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:37,303 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1852121258] [2024-11-19 14:49:37,303 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1852121258] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:37,304 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:37,304 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:37,304 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288700682] [2024-11-19 14:49:37,304 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:37,304 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:37,304 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:37,304 INFO L85 PathProgramCache]: Analyzing trace with hash 797598812, now seen corresponding path program 8 times [2024-11-19 14:49:37,305 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:37,305 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1611955331] [2024-11-19 14:49:37,305 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-19 14:49:37,305 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:37,321 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:49:37,321 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:37,691 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-19 14:49:37,692 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:37,692 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1611955331] [2024-11-19 14:49:37,692 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1611955331] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:37,692 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:37,693 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:37,693 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1774137938] [2024-11-19 14:49:37,693 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:37,693 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:37,693 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:37,694 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:37,694 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:37,694 INFO L87 Difference]: Start difference. First operand 26624 states and 49188 transitions. cyclomatic complexity: 22565 Second operand has 4 states, 4 states have (on average 21.5) internal successors, (86), 3 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:37,950 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:37,950 INFO L93 Difference]: Finished difference Result 50060 states and 92512 transitions. [2024-11-19 14:49:37,951 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 50060 states and 92512 transitions. [2024-11-19 14:49:38,190 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 47171 [2024-11-19 14:49:38,356 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 50060 states to 50060 states and 92512 transitions. [2024-11-19 14:49:38,357 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 50060 [2024-11-19 14:49:38,403 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 50060 [2024-11-19 14:49:38,404 INFO L73 IsDeterministic]: Start isDeterministic. Operand 50060 states and 92512 transitions. [2024-11-19 14:49:38,443 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:38,444 INFO L218 hiAutomatonCegarLoop]: Abstraction has 50060 states and 92512 transitions. [2024-11-19 14:49:38,477 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50060 states and 92512 transitions. [2024-11-19 14:49:38,912 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50060 to 50050. [2024-11-19 14:49:38,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50050 states, 50050 states have (on average 1.848091908091908) internal successors, (92497), 50049 states have internal predecessors, (92497), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:39,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50050 states to 50050 states and 92497 transitions. [2024-11-19 14:49:39,603 INFO L240 hiAutomatonCegarLoop]: Abstraction has 50050 states and 92497 transitions. [2024-11-19 14:49:39,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:39,608 INFO L425 stractBuchiCegarLoop]: Abstraction has 50050 states and 92497 transitions. [2024-11-19 14:49:39,608 INFO L332 stractBuchiCegarLoop]: ======== Iteration 31 ============ [2024-11-19 14:49:39,608 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50050 states and 92497 transitions. [2024-11-19 14:49:39,767 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 47161 [2024-11-19 14:49:39,768 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:39,768 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:39,774 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:39,774 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:39,774 INFO L745 eck$LassoCheckResult]: Stem: 1239028#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1239029#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1240042#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1239614#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1239615#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1239440#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1239441#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1240603#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1239854#L3030 assume !(0 == getOrigin_~person#1); 1239855#L3034 assume !(1 == getOrigin_~person#1); 1240009#L3038 assume !(2 == getOrigin_~person#1); 1239503#L3042 assume !(3 == getOrigin_~person#1); 1239504#L3046 assume !(4 == getOrigin_~person#1); 1240409#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1239054#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1239055#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1240270#L2235 assume 1 == initPersonOnFloor_~floor#1; 1240062#L2236 assume !(0 == initPersonOnFloor_~person#1); 1240063#L2239 assume !(1 == initPersonOnFloor_~person#1); 1240156#L2242 assume !(2 == initPersonOnFloor_~person#1); 1240157#L2245 assume !(3 == initPersonOnFloor_~person#1); 1240791#L2248 assume !(4 == initPersonOnFloor_~person#1); 1240813#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1239323#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1239324#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1240223#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1240372#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1240701#L2000 assume !(0 == callOnFloor_~floorID#1); 1240703#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1239366#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1239367#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1239433#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1239434#L3030-1 assume !(0 == getOrigin_~person#1); 1240831#L3034-1 assume !(1 == getOrigin_~person#1); 1240832#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1239375#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1239376#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1239357#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1239358#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1240536#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1240537#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1239070#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1239071#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1240909#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1240934#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1240127#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1240128#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1240931#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1240930#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1240927#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1240926#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1240925#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1240924#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1240923#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1240922#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1240921#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1240907#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1240175#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1239992#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1239993#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1240919#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1240635#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1238848#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1238849#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1240443#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1240444#L480 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1240089#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1238940#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1238941#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1240908#getReverseHeading_returnLabel#1 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1240920#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1238933#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1238934#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1240420#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1239089#L852-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1239090#isTopFloor_returnLabel#5 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1239185#L856-6 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1239186#L862-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1240784#L868-5 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1240122#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1243145#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1243140#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243138#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243054#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243059#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243057#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243032#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1243023#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1243017#L1637-2 [2024-11-19 14:49:39,775 INFO L747 eck$LassoCheckResult]: Loop: 1243017#L1637-2 assume !false; 1243013#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1242986#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1242968#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1242962#L1645 assume 1 != cleanup_~tmp___0~6#1; 1242949#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1242793#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1242745#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1241648#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1241650#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1245715#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1245707#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1245703#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1245702#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1245691#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1245690#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1245689#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1245688#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1245687#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1241009#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1240987#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1240985#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1240986#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1242782#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1240973#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1240975#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1240965#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1240967#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1242168#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1240958#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1240959#L645-2 assume !(0 == ~currentFloorID~0); 1240953#L651-2 assume ~currentFloorID~0 > 0; 1240954#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1240955#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1240951#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 1240952#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1242145#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1243064#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1243061#L852-3 assume !(1 == ~currentHeading~0); 1243033#L862-9 assume !(0 == ~currentFloorID~0); 1243024#L862-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1243018#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1243014#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1243012#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1243009#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1243010#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1243011#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1242995#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1242988#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1242987#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1242969#L1637-2 assume !false; 1242963#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1242950#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1242948#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1242947#L1645 assume 1 != cleanup_~tmp___0~6#1; 1242946#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1242945#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1242944#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1242942#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1242941#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1242940#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1242937#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1242921#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1242916#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1242904#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1242902#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1242900#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1242897#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1242895#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1242893#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1242891#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1242890#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1242888#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1242887#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1242721#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1242723#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1242631#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1242623#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1242624#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1245975#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1245973#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1243811#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1245963#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1245964#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1253097#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1253081#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1253080#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1253079#L852-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1243573#isTopFloor_returnLabel#10 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1243571#L856-15 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1243569#L862-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1243566#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1243564#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1243563#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1243562#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1243549#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1243541#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1243121#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 1243049#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1243031#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1243022#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1243017#L1637-2 [2024-11-19 14:49:39,776 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:39,776 INFO L85 PathProgramCache]: Analyzing trace with hash -2035962087, now seen corresponding path program 1 times [2024-11-19 14:49:39,776 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:39,776 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [825907742] [2024-11-19 14:49:39,776 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:39,776 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:39,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:39,887 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:39,887 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:39,888 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [825907742] [2024-11-19 14:49:39,888 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [825907742] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:39,888 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:39,888 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:39,888 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1146569058] [2024-11-19 14:49:39,888 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:39,888 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:39,889 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:39,889 INFO L85 PathProgramCache]: Analyzing trace with hash -793515065, now seen corresponding path program 1 times [2024-11-19 14:49:39,889 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:39,889 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1857413795] [2024-11-19 14:49:39,889 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:39,889 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:39,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:39,965 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:49:39,965 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:39,965 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1857413795] [2024-11-19 14:49:39,965 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1857413795] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:39,966 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:39,966 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:39,966 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1739520254] [2024-11-19 14:49:39,966 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:39,966 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:39,966 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:39,967 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:39,967 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:39,967 INFO L87 Difference]: Start difference. First operand 50050 states and 92497 transitions. cyclomatic complexity: 42448 Second operand has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:40,389 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:40,389 INFO L93 Difference]: Finished difference Result 53321 states and 98549 transitions. [2024-11-19 14:49:40,389 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53321 states and 98549 transitions. [2024-11-19 14:49:40,603 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 50311 [2024-11-19 14:49:40,762 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53321 states to 53321 states and 98549 transitions. [2024-11-19 14:49:40,762 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53321 [2024-11-19 14:49:40,810 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53321 [2024-11-19 14:49:40,810 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53321 states and 98549 transitions. [2024-11-19 14:49:40,845 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:40,845 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53321 states and 98549 transitions. [2024-11-19 14:49:40,880 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53321 states and 98549 transitions. [2024-11-19 14:49:41,761 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53321 to 53195. [2024-11-19 14:49:41,807 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53195 states, 53195 states have (on average 1.8488203778550616) internal successors, (98348), 53194 states have internal predecessors, (98348), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:41,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53195 states to 53195 states and 98348 transitions. [2024-11-19 14:49:41,894 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53195 states and 98348 transitions. [2024-11-19 14:49:41,895 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-19 14:49:41,895 INFO L425 stractBuchiCegarLoop]: Abstraction has 53195 states and 98348 transitions. [2024-11-19 14:49:41,895 INFO L332 stractBuchiCegarLoop]: ======== Iteration 32 ============ [2024-11-19 14:49:41,895 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53195 states and 98348 transitions. [2024-11-19 14:49:42,041 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 50240 [2024-11-19 14:49:42,041 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:42,041 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:42,050 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:42,050 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:42,050 INFO L745 eck$LassoCheckResult]: Stem: 1342419#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1342420#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1343433#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1342998#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1342999#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1342820#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1342821#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1343991#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1343237#L3030 assume !(0 == getOrigin_~person#1); 1343238#L3034 assume !(1 == getOrigin_~person#1); 1343396#L3038 assume !(2 == getOrigin_~person#1); 1342885#L3042 assume !(3 == getOrigin_~person#1); 1342886#L3046 assume !(4 == getOrigin_~person#1); 1343798#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1342441#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1342442#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1343656#L2235 assume 1 == initPersonOnFloor_~floor#1; 1343451#L2236 assume !(0 == initPersonOnFloor_~person#1); 1343452#L2239 assume !(1 == initPersonOnFloor_~person#1); 1343540#L2242 assume !(2 == initPersonOnFloor_~person#1); 1343541#L2245 assume !(3 == initPersonOnFloor_~person#1); 1344174#L2248 assume !(4 == initPersonOnFloor_~person#1); 1344197#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1342708#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1342709#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1343610#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1343759#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1344084#L2000 assume !(0 == callOnFloor_~floorID#1); 1344085#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1342980#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1344349#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1344348#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1344347#L3030-1 assume !(0 == getOrigin_~person#1); 1344346#L3034-1 assume !(1 == getOrigin_~person#1); 1344345#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1344344#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1342649#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1342650#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1342742#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1343926#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1343927#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1342459#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1342460#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1342323#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1342324#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1342376#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1343516#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1344329#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1344328#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1344325#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1344324#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1344323#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1344322#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1344321#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1344320#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1344319#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1344301#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1343559#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1343382#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1343384#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1344316#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1344025#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1342236#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1342237#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1343830#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1343831#L480 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1343818#L486 assume !(~currentFloorID~0 < 0); 1342127#$Ultimate##2052 assume !(~currentFloorID~0 < 0); 1342128#$Ultimate##2058 assume ~currentFloorID~0 < 1; 1343677#L516 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 1343678#$Ultimate##2074 assume ~currentFloorID~0 < 1; 1342218#L532 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 1342219#L533 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1342204#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1344048#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1343247#L852 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1343132#isTopFloor_returnLabel#2 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1343133#L856 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1343234#L862-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1342337#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1344352#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1344353#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1343854#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1343855#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1350340#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1350345#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1350343#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1350336#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1350335#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1350333#L1637-2 [2024-11-19 14:49:42,051 INFO L747 eck$LassoCheckResult]: Loop: 1350333#L1637-2 assume !false; 1350332#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1350326#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1350325#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1350324#L1645 assume 1 != cleanup_~tmp___0~6#1; 1350323#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1350322#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1350321#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1350320#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1346703#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1346704#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1352247#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1352242#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1346086#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1346074#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1346062#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1346060#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1346058#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1346055#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 1346051#L1940-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1346049#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1346045#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1346043#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1346033#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1346030#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1346027#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1346025#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1346023#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1346022#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1346020#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1346019#L476-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1346018#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1346016#L480-2 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1346014#L486-2 assume ~currentFloorID~0 < 0; 1346012#L487-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1346013#L1932-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1346015#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~0#1 := stopRequestedInDirection_#t~ret11#1;havoc stopRequestedInDirection_#t~ret11#1; 1346010#L491-2 assume 0 != stopRequestedInDirection_~tmp___4~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1346011#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1346557#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1346169#L852-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1346162#isTopFloor_returnLabel#7 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1346153#L856-9 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1346146#L862-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1346143#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1346142#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1346141#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1346140#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1346139#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1346138#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1346132#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1346133#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1354566#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1354565#L1637-2 assume !false; 1354564#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1354563#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1354562#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1354561#L1645 assume 1 != cleanup_~tmp___0~6#1; 1354560#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1354559#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1354558#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1354557#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1354555#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1354554#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1354552#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1354549#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1352944#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1348591#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1348590#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1348589#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1348587#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1348586#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1348585#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1348582#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1348581#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1348579#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1348578#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1348576#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1348575#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1348573#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1348571#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1342477#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1342478#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1356820#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1356821#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1356847#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1356844#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1356810#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1356789#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1356785#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1356739#L852-5 assume !(1 == ~currentHeading~0); 1342512#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1342513#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1350369#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1350367#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1350366#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1350363#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1350362#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1350359#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1350358#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 1350353#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1350337#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1350334#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1350333#L1637-2 [2024-11-19 14:49:42,052 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:42,052 INFO L85 PathProgramCache]: Analyzing trace with hash 1903061771, now seen corresponding path program 1 times [2024-11-19 14:49:42,052 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:42,052 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1509834923] [2024-11-19 14:49:42,052 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:42,053 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:42,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:42,130 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:42,130 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:42,131 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1509834923] [2024-11-19 14:49:42,131 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1509834923] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:42,131 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:42,131 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:42,131 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1473899136] [2024-11-19 14:49:42,131 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:42,131 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:42,131 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:42,131 INFO L85 PathProgramCache]: Analyzing trace with hash -349536861, now seen corresponding path program 1 times [2024-11-19 14:49:42,131 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:42,132 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [768356643] [2024-11-19 14:49:42,132 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:42,132 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:42,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:42,188 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-11-19 14:49:42,188 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:42,188 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [768356643] [2024-11-19 14:49:42,188 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [768356643] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:42,189 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:42,189 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:42,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [76708203] [2024-11-19 14:49:42,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:42,189 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:42,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:42,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:42,189 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:42,190 INFO L87 Difference]: Start difference. First operand 53195 states and 98348 transitions. cyclomatic complexity: 45155 Second operand has 5 states, 5 states have (on average 17.8) internal successors, (89), 5 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:42,402 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:42,403 INFO L93 Difference]: Finished difference Result 53328 states and 98337 transitions. [2024-11-19 14:49:42,403 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53328 states and 98337 transitions. [2024-11-19 14:49:43,206 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 50370 [2024-11-19 14:49:43,353 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53328 states to 53328 states and 98337 transitions. [2024-11-19 14:49:43,354 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53328 [2024-11-19 14:49:43,397 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53328 [2024-11-19 14:49:43,397 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53328 states and 98337 transitions. [2024-11-19 14:49:43,430 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:43,430 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53328 states and 98337 transitions. [2024-11-19 14:49:43,465 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53328 states and 98337 transitions. [2024-11-19 14:49:43,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53328 to 53195. [2024-11-19 14:49:43,828 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53195 states, 53195 states have (on average 1.8445342607387913) internal successors, (98120), 53194 states have internal predecessors, (98120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:43,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53195 states to 53195 states and 98120 transitions. [2024-11-19 14:49:43,914 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53195 states and 98120 transitions. [2024-11-19 14:49:43,914 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-19 14:49:43,914 INFO L425 stractBuchiCegarLoop]: Abstraction has 53195 states and 98120 transitions. [2024-11-19 14:49:43,914 INFO L332 stractBuchiCegarLoop]: ======== Iteration 33 ============ [2024-11-19 14:49:43,915 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53195 states and 98120 transitions. [2024-11-19 14:49:44,062 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 50240 [2024-11-19 14:49:44,063 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:44,063 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:44,071 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:44,071 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:44,071 INFO L745 eck$LassoCheckResult]: Stem: 1448948#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1448949#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1449969#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1449532#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1449533#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1449355#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1449356#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1450539#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1449777#L3030 assume !(0 == getOrigin_~person#1); 1449778#L3034 assume !(1 == getOrigin_~person#1); 1449934#L3038 assume !(2 == getOrigin_~person#1); 1449418#L3042 assume !(3 == getOrigin_~person#1); 1449419#L3046 assume !(4 == getOrigin_~person#1); 1450334#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1448974#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1448975#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1450198#L2235 assume 1 == initPersonOnFloor_~floor#1; 1449988#L2236 assume !(0 == initPersonOnFloor_~person#1); 1449989#L2239 assume !(1 == initPersonOnFloor_~person#1); 1450082#L2242 assume !(2 == initPersonOnFloor_~person#1); 1450083#L2245 assume !(3 == initPersonOnFloor_~person#1); 1450726#L2248 assume !(4 == initPersonOnFloor_~person#1); 1450749#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1449240#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1449241#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1450152#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1450296#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1450630#L2000 assume !(0 == callOnFloor_~floorID#1); 1450631#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1449513#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1450069#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1450070#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1448993#L3030-1 assume !(0 == getOrigin_~person#1); 1448994#L3034-1 assume !(1 == getOrigin_~person#1); 1448684#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1448685#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1449182#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1449183#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1450709#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1450710#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1450903#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1450901#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1450900#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1450899#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1450898#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1450896#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1449187#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1449188#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1449839#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1450891#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1450890#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1450889#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1450888#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1450887#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1450886#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1450885#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1450871#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1450100#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1449919#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1449921#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1450882#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1450572#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1448768#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1448769#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1450375#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1450376#L480 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1450360#L486 assume !(~currentFloorID~0 < 0); 1448660#$Ultimate##2052 assume !(~currentFloorID~0 < 0); 1448661#$Ultimate##2058 assume ~currentFloorID~0 < 1; 1450215#L516 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1450047#L1932-2 assume !(0 == isFloorCalling_~floorID#1); 1450048#L1936-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1448964#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret12#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1#1 := stopRequestedInDirection_#t~ret12#1;havoc stopRequestedInDirection_#t~ret12#1; 1449631#L520 assume 0 != stopRequestedInDirection_~tmp___3~1#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1448737#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1450594#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1449789#L852 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1449668#isTopFloor_returnLabel#2 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1449669#L856 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1449774#L862-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1448868#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1450049#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1450157#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1450158#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1450398#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1457297#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1457302#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1457300#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1449995#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1449996#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1450780#L1637-2 [2024-11-19 14:49:44,072 INFO L747 eck$LassoCheckResult]: Loop: 1450780#L1637-2 assume !false; 1470498#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1470245#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1470205#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1470194#L1645 assume 1 != cleanup_~tmp___0~6#1; 1470191#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1470189#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1470187#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1470185#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1460408#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1460409#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1471775#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1471760#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1471756#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1471745#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1471744#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1471743#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1471736#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1471737#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 1476074#L1940-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1476072#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1476071#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1476070#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1476067#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1476065#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1476063#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1476062#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1476056#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1470970#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1470967#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1470965#L476-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1470964#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1468690#L480-2 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1467392#L486-2 assume ~currentFloorID~0 < 0; 1467393#L487-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1468354#L1932-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1450880#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~0#1 := stopRequestedInDirection_#t~ret11#1;havoc stopRequestedInDirection_#t~ret11#1; 1449135#L491-2 assume 0 != stopRequestedInDirection_~tmp___4~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1448951#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1471626#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1452279#L852-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1452277#isTopFloor_returnLabel#7 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1452274#L856-9 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1452270#L862-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1452013#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1452011#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1452009#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1452008#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1452006#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1452007#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1451991#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1451992#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1458397#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1458396#L1637-2 assume !false; 1458395#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1458394#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1458393#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1458392#L1645 assume 1 != cleanup_~tmp___0~6#1; 1458391#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1458390#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1458389#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1458387#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1458386#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1457834#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1457437#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1457434#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1457429#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1457419#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1457407#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1457405#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1457403#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1457401#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1457399#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1457397#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1457395#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1457393#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1457391#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1457388#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1457222#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1457218#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1457214#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1449010#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1449011#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1467623#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1467621#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1467616#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1467614#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1467474#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1452320#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1452317#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1452037#L852-5 assume !(1 == ~currentHeading~0); 1449045#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1449046#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1452031#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1470618#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1470617#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1470615#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1470613#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1470612#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1470611#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 1470608#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1470601#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1470600#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1450780#L1637-2 [2024-11-19 14:49:44,072 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:44,073 INFO L85 PathProgramCache]: Analyzing trace with hash 356558387, now seen corresponding path program 1 times [2024-11-19 14:49:44,073 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:44,073 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1543947178] [2024-11-19 14:49:44,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:44,073 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:44,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:44,145 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:44,145 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:44,145 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1543947178] [2024-11-19 14:49:44,145 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1543947178] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:44,145 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:44,146 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:44,146 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [623501526] [2024-11-19 14:49:44,146 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:44,146 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:44,146 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:44,146 INFO L85 PathProgramCache]: Analyzing trace with hash -349536861, now seen corresponding path program 2 times [2024-11-19 14:49:44,146 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:44,146 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1078868777] [2024-11-19 14:49:44,146 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-19 14:49:44,147 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:44,163 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:49:44,163 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:44,598 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-11-19 14:49:44,599 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:44,599 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1078868777] [2024-11-19 14:49:44,599 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1078868777] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:44,599 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:44,599 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:44,599 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [683781677] [2024-11-19 14:49:44,599 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:44,599 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:44,599 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:44,600 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:44,600 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:44,600 INFO L87 Difference]: Start difference. First operand 53195 states and 98120 transitions. cyclomatic complexity: 44927 Second operand has 5 states, 5 states have (on average 18.0) internal successors, (90), 5 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:44,858 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:44,858 INFO L93 Difference]: Finished difference Result 53205 states and 98107 transitions. [2024-11-19 14:49:44,858 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53205 states and 98107 transitions. [2024-11-19 14:49:45,116 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 50250 [2024-11-19 14:49:45,299 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53205 states to 53205 states and 98107 transitions. [2024-11-19 14:49:45,299 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53205 [2024-11-19 14:49:45,351 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53205 [2024-11-19 14:49:45,351 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53205 states and 98107 transitions. [2024-11-19 14:49:45,391 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:45,391 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53205 states and 98107 transitions. [2024-11-19 14:49:45,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53205 states and 98107 transitions. [2024-11-19 14:49:45,878 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53205 to 53195. [2024-11-19 14:49:45,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53195 states, 53195 states have (on average 1.8440078954788983) internal successors, (98092), 53194 states have internal predecessors, (98092), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:46,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53195 states to 53195 states and 98092 transitions. [2024-11-19 14:49:46,619 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53195 states and 98092 transitions. [2024-11-19 14:49:46,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-19 14:49:46,620 INFO L425 stractBuchiCegarLoop]: Abstraction has 53195 states and 98092 transitions. [2024-11-19 14:49:46,620 INFO L332 stractBuchiCegarLoop]: ======== Iteration 34 ============ [2024-11-19 14:49:46,620 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53195 states and 98092 transitions. [2024-11-19 14:49:46,845 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 50240 [2024-11-19 14:49:46,845 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:46,845 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:46,850 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:46,850 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:46,851 INFO L745 eck$LassoCheckResult]: Stem: 1555359#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1555360#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1556376#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1555949#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1555950#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1555772#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1555773#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1556952#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1556187#L3030 assume !(0 == getOrigin_~person#1); 1556188#L3034 assume !(1 == getOrigin_~person#1); 1556343#L3038 assume !(2 == getOrigin_~person#1); 1555837#L3042 assume !(3 == getOrigin_~person#1); 1555838#L3046 assume !(4 == getOrigin_~person#1); 1556750#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1555385#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1555386#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1556606#L2235 assume 1 == initPersonOnFloor_~floor#1; 1556397#L2236 assume !(0 == initPersonOnFloor_~person#1); 1556398#L2239 assume !(1 == initPersonOnFloor_~person#1); 1556491#L2242 assume !(2 == initPersonOnFloor_~person#1); 1556492#L2245 assume !(3 == initPersonOnFloor_~person#1); 1557141#L2248 assume !(4 == initPersonOnFloor_~person#1); 1557165#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1555655#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1555656#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1556557#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1556710#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1557048#L2000 assume !(0 == callOnFloor_~floorID#1); 1557050#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1555698#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1555699#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1555765#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1555766#L3030-1 assume !(0 == getOrigin_~person#1); 1557186#L3034-1 assume !(1 == getOrigin_~person#1); 1557187#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1555707#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1555708#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1555689#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1555690#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1556882#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1556883#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1555403#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1555404#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1557269#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1557294#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1556460#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1556461#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1557290#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1557289#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1557286#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1557285#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1557284#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1557283#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1557282#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1557281#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1557280#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1557265#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1556509#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1556327#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1556328#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1557278#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1556986#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1555180#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1555181#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1556785#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1556786#L480 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1556773#L486 assume !(~currentFloorID~0 < 0); 1555072#$Ultimate##2052 assume !(~currentFloorID~0 < 0); 1555073#$Ultimate##2058 assume ~currentFloorID~0 < 1; 1556625#L516 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1556452#L1932-2 assume !(0 == isFloorCalling_~floorID#1); 1556453#L1936-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1555375#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret12#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1#1 := stopRequestedInDirection_#t~ret12#1;havoc stopRequestedInDirection_#t~ret12#1; 1556044#L520 assume 0 != stopRequestedInDirection_~tmp___3~1#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1555149#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1557014#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1556198#L852 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1556083#isTopFloor_returnLabel#2 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1556084#L856 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1555279#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1555280#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1560336#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1560332#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1560330#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1560328#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1560302#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1560307#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1560305#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1560298#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1560297#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1560293#L1637-2 [2024-11-19 14:49:46,851 INFO L747 eck$LassoCheckResult]: Loop: 1560293#L1637-2 assume !false; 1560289#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1560285#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1560281#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1560277#L1645 assume 1 != cleanup_~tmp___0~6#1; 1560276#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1560275#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1560274#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1557918#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1557382#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1557383#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1563670#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1563667#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1563665#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1563653#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1563651#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1563649#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1563646#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1563647#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1566557#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1563640#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1563641#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1563624#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1563623#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1563615#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1563617#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1558359#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1558355#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1558354#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1558352#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1558351#L645-2 assume !(0 == ~currentFloorID~0); 1558350#L651-2 assume ~currentFloorID~0 > 0; 1558349#L652-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1558348#L1932-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1558347#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret16#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret16#1;havoc stopRequestedInDirection_#t~ret16#1; 1558342#L656-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1558343#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1560175#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1560172#L852-3 assume !(1 == ~currentHeading~0); 1559823#L862-9 assume !(0 == ~currentFloorID~0); 1559821#L862-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1559556#L868-7 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1559553#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1559552#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1559550#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1559548#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1559547#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1559541#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1559535#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1559534#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1559533#L1637-2 assume !false; 1559531#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1559530#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1559529#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1559527#L1645 assume 1 != cleanup_~tmp___0~6#1; 1559526#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1559345#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1559341#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1559339#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1559334#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1559332#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1559322#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1559317#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1559291#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1559278#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1559275#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1559272#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1559268#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1559265#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1559262#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1559259#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1559256#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1559252#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1559249#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1559240#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1559239#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1559237#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1559231#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1559232#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1578219#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1555975#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1555298#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1555300#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1560490#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1560489#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1560458#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1560451#L1142-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1555873#L907-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1560341#getReverseHeading_returnLabel#4 timeShift_#t~ret46#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1560340#L852-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1560339#isTopFloor_returnLabel#9 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1560338#L856-12 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1560337#L862-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1560335#L868-9 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1560331#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1560329#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1560325#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1560324#$Ultimate##4899 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1560321#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1560320#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 1560315#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1560299#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1560296#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1560293#L1637-2 [2024-11-19 14:49:46,851 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:46,851 INFO L85 PathProgramCache]: Analyzing trace with hash 1057622965, now seen corresponding path program 1 times [2024-11-19 14:49:46,852 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:46,852 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [912823256] [2024-11-19 14:49:46,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:46,852 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:46,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:47,012 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:47,013 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:47,013 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [912823256] [2024-11-19 14:49:47,013 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [912823256] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:47,013 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:47,013 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:47,013 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1695289642] [2024-11-19 14:49:47,013 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:47,014 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:47,014 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:47,014 INFO L85 PathProgramCache]: Analyzing trace with hash -809170302, now seen corresponding path program 1 times [2024-11-19 14:49:47,014 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:47,014 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [329209476] [2024-11-19 14:49:47,014 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:47,014 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:47,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:47,093 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:49:47,093 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:47,093 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [329209476] [2024-11-19 14:49:47,093 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [329209476] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:47,094 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:47,094 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:47,094 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1091238707] [2024-11-19 14:49:47,094 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:47,094 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:47,094 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:47,094 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-19 14:49:47,094 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2024-11-19 14:49:47,095 INFO L87 Difference]: Start difference. First operand 53195 states and 98092 transitions. cyclomatic complexity: 44899 Second operand has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 7 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:47,677 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:47,678 INFO L93 Difference]: Finished difference Result 54067 states and 99440 transitions. [2024-11-19 14:49:47,678 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 54067 states and 99440 transitions. [2024-11-19 14:49:47,890 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 51139 [2024-11-19 14:49:48,045 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 54067 states to 54067 states and 99440 transitions. [2024-11-19 14:49:48,045 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 54067 [2024-11-19 14:49:48,092 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 54067 [2024-11-19 14:49:48,092 INFO L73 IsDeterministic]: Start isDeterministic. Operand 54067 states and 99440 transitions. [2024-11-19 14:49:48,130 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:48,130 INFO L218 hiAutomatonCegarLoop]: Abstraction has 54067 states and 99440 transitions. [2024-11-19 14:49:48,166 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54067 states and 99440 transitions. [2024-11-19 14:49:49,029 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54067 to 54012. [2024-11-19 14:49:49,075 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54012 states, 54012 states have (on average 1.840054062060283) internal successors, (99385), 54011 states have internal predecessors, (99385), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:49,160 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54012 states to 54012 states and 99385 transitions. [2024-11-19 14:49:49,160 INFO L240 hiAutomatonCegarLoop]: Abstraction has 54012 states and 99385 transitions. [2024-11-19 14:49:49,161 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-19 14:49:49,161 INFO L425 stractBuchiCegarLoop]: Abstraction has 54012 states and 99385 transitions. [2024-11-19 14:49:49,161 INFO L332 stractBuchiCegarLoop]: ======== Iteration 35 ============ [2024-11-19 14:49:49,161 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 54012 states and 99385 transitions. [2024-11-19 14:49:49,315 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 51084 [2024-11-19 14:49:49,315 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:49,315 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:49,323 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:49,323 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:49,323 INFO L745 eck$LassoCheckResult]: Stem: 1662638#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1662639#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1663653#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1663227#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1663228#valid_product_returnLabel#1 main_#t~ret86#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1663050#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1663051#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1664225#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1663459#L3030 assume !(0 == getOrigin_~person#1); 1663460#L3034 assume !(1 == getOrigin_~person#1); 1663621#L3038 assume !(2 == getOrigin_~person#1); 1663114#L3042 assume !(3 == getOrigin_~person#1); 1663115#L3046 assume !(4 == getOrigin_~person#1); 1664024#L3050 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1662664#getOrigin_returnLabel#1 bigMacCall_#t~ret79#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1662665#L2208 assume !(0 == initPersonOnFloor_~floor#1); 1663882#L2235 assume 1 == initPersonOnFloor_~floor#1; 1663673#L2236 assume !(0 == initPersonOnFloor_~person#1); 1663674#L2239 assume !(1 == initPersonOnFloor_~person#1); 1663764#L2242 assume !(2 == initPersonOnFloor_~person#1); 1663765#L2245 assume !(3 == initPersonOnFloor_~person#1); 1664415#L2248 assume !(4 == initPersonOnFloor_~person#1); 1664436#L2251 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1662935#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1662936#L3161 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1663833#L3164 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1663984#L3173-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1664322#L2000 assume !(0 == callOnFloor_~floorID#1); 1664323#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1663209#L2012-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1663750#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1663751#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1662680#L3030-1 assume !(0 == getOrigin_~person#1); 1662681#L3034-1 assume !(1 == getOrigin_~person#1); 1662373#L3038-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1662374#getOrigin_returnLabel#2 angelinaCall_#t~ret76#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1662875#L2208-1 assume !(0 == initPersonOnFloor_~floor#1); 1662876#L2235-1 assume !(1 == initPersonOnFloor_~floor#1); 1664398#L2262-1 assume 2 == initPersonOnFloor_~floor#1; 1664399#L2263-2 assume !(0 == initPersonOnFloor_~person#1); 1664276#L2266-2 assume !(1 == initPersonOnFloor_~person#1); 1664277#L2269-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1664577#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1662542#L3161-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1662543#L3164-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1662598#L3167-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1662880#L3173-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1662881#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1664153#L2003-2 assume !(1 == callOnFloor_~floorID#1); 1664154#L2006-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1664571#L2012-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1664570#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1664569#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1664568#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1664567#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1664566#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1664549#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1663782#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1663603#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1663605#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1664564#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1664258#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1662460#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1662461#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1664059#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1664060#L480 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1664047#L486 assume !(~currentFloorID~0 < 0); 1662352#$Ultimate##2052 assume !(~currentFloorID~0 < 0); 1662353#$Ultimate##2058 assume ~currentFloorID~0 < 1; 1663902#L516 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1663727#L1932-2 assume !(0 == isFloorCalling_~floorID#1); 1663728#L1936-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1662654#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret12#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1#1 := stopRequestedInDirection_#t~ret12#1;havoc stopRequestedInDirection_#t~ret12#1; 1663321#L520 assume 0 != stopRequestedInDirection_~tmp___3~1#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1662429#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1664283#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1663471#L852 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1663359#isTopFloor_returnLabel#2 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1663360#L856 assume !(0 != continueInDirection_~tmp~3#1); 1662558#L862-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1662559#L868-1 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1663729#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1663838#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1663839#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1664084#$Ultimate##2539 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1670437#$Ultimate##2548 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1670442#$Ultimate##2557 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1670440#$Ultimate##2566 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1670433#L3259 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1670432#timeShift_returnLabel#1 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1670430#L1637-2 [2024-11-19 14:49:49,323 INFO L747 eck$LassoCheckResult]: Loop: 1670430#L1637-2 assume !false; 1670429#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1670428#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1670427#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1670426#L1645 assume 1 != cleanup_~tmp___0~6#1; 1670421#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1670419#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1670418#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1670416#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1670414#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1670412#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1670408#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1670404#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1670402#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1670390#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1670388#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1670387#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1670383#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1670380#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1670378#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1670376#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1670375#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1670372#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1670370#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1670364#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1670362#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1670358#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1670357#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1670351#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1670349#L476-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1670348#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1670346#L480-2 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1670345#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1670343#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1670341#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1670340#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1670332#L476-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1670333#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1669671#L480-3 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1666693#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1669663#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1669661#L852-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1669658#isTopFloor_returnLabel#10 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1669655#L856-15 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1666783#L862-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1666780#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1666778#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1666777#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1666776#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1666775#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1666769#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1666763#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1666764#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1667975#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1667974#L1637-2 assume !false; 1667973#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1667972#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1667971#isBlocked_returnLabel#1 cleanup_#t~ret80#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1667970#L1645 assume 1 != cleanup_~tmp___0~6#1; 1667969#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1667968#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1667967#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1667960#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 1667961#L384 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1670032#L1932-22 assume !(0 == isFloorCalling_~floorID#1); 1670026#L1936-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1670021#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret5#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret5#1;havoc anyStopRequested_#t~ret5#1; 1670022#L391 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1670963#anyStopRequested_returnLabel#1 isIdle_#t~ret9#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1670005#isIdle_returnLabel#1 cleanup_#t~ret81#1 := isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1670006#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1670699#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1670697#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1670695#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1670694#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1670693#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1670691#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1670690#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1670682#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1670680#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1670678#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1670676#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1662701#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1662702#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1679819#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1679816#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1679813#getReverseHeading_returnLabel#3 timeShift_#t~ret44#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1679814#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 1679790#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1662789#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1663148#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1663149#L852-5 assume !(1 == ~currentHeading~0); 1662738#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1662739#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1671425#L868-11 havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1671421#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1671420#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1671418#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1671416#$Ultimate##4899 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1671325#$Ultimate##4908 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1671321#$Ultimate##4917 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1671318#$Ultimate##4926 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1671317#L3259-1 havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1670431#timeShift_returnLabel#2 havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1670430#L1637-2 [2024-11-19 14:49:49,324 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:49,324 INFO L85 PathProgramCache]: Analyzing trace with hash 614723825, now seen corresponding path program 1 times [2024-11-19 14:49:49,324 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:49,325 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [322054041] [2024-11-19 14:49:49,325 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:49,325 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:49,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:49,434 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:49,434 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:49,434 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [322054041] [2024-11-19 14:49:49,434 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [322054041] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:49,434 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:49,435 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:49,435 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [766006094] [2024-11-19 14:49:49,435 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:49,435 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:49,435 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:49,436 INFO L85 PathProgramCache]: Analyzing trace with hash 1865589342, now seen corresponding path program 1 times [2024-11-19 14:49:49,436 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:49,436 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1681956266] [2024-11-19 14:49:49,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:49,436 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:49,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:49,510 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-11-19 14:49:49,510 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:49,510 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1681956266] [2024-11-19 14:49:49,510 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1681956266] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:49,510 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:49,510 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:49,510 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [754540564] [2024-11-19 14:49:49,510 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:49,510 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:49,511 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:49,511 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-19 14:49:49,511 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-19 14:49:49,511 INFO L87 Difference]: Start difference. First operand 54012 states and 99385 transitions. cyclomatic complexity: 45375 Second operand has 6 states, 6 states have (on average 15.0) internal successors, (90), 5 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:50,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:50,776 INFO L93 Difference]: Finished difference Result 100316 states and 184159 transitions. [2024-11-19 14:49:50,776 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 100316 states and 184159 transitions. [2024-11-19 14:49:51,186 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 97254 [2024-11-19 14:49:51,536 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 100316 states to 100244 states and 184079 transitions. [2024-11-19 14:49:51,536 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 100244 [2024-11-19 14:49:51,624 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 100244 [2024-11-19 14:49:51,624 INFO L73 IsDeterministic]: Start isDeterministic. Operand 100244 states and 184079 transitions. [2024-11-19 14:49:51,686 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:51,686 INFO L218 hiAutomatonCegarLoop]: Abstraction has 100244 states and 184079 transitions. [2024-11-19 14:49:51,752 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100244 states and 184079 transitions. [2024-11-19 14:49:52,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100244 to 87232. [2024-11-19 14:49:52,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87232 states, 87232 states have (on average 1.8372730190755686) internal successors, (160269), 87231 states have internal predecessors, (160269), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)