./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec1_product25.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 3061b6dc Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec1_product25.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 680b86ee69d2fa1a591b34672ee94362515e8041606baf59201de5a19c705dd0 --- Real Ultimate output --- This is Ultimate 0.2.5-tmp.dk.eval-assert-order-craig-3061b6d-m [2024-11-19 14:49:24,590 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-19 14:49:24,649 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-19 14:49:24,653 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-19 14:49:24,653 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-19 14:49:24,673 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-19 14:49:24,674 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-19 14:49:24,674 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-19 14:49:24,674 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-19 14:49:24,675 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-19 14:49:24,675 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-19 14:49:24,676 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-19 14:49:24,676 INFO L153 SettingsManager]: * Use SBE=true [2024-11-19 14:49:24,677 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-19 14:49:24,677 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-19 14:49:24,677 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-19 14:49:24,678 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-19 14:49:24,678 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-19 14:49:24,678 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-19 14:49:24,679 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-19 14:49:24,679 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-19 14:49:24,680 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-19 14:49:24,680 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-19 14:49:24,680 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-19 14:49:24,681 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-19 14:49:24,681 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-19 14:49:24,681 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-19 14:49:24,681 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-19 14:49:24,682 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-19 14:49:24,682 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-19 14:49:24,682 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-19 14:49:24,683 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-19 14:49:24,683 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-19 14:49:24,683 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-19 14:49:24,684 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-19 14:49:24,684 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-19 14:49:24,684 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-19 14:49:24,685 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-19 14:49:24,685 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-19 14:49:24,686 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 680b86ee69d2fa1a591b34672ee94362515e8041606baf59201de5a19c705dd0 [2024-11-19 14:49:24,936 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-19 14:49:24,961 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-19 14:49:24,966 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-19 14:49:24,969 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-19 14:49:24,969 INFO L274 PluginConnector]: CDTParser initialized [2024-11-19 14:49:24,971 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec1_product25.cil.c [2024-11-19 14:49:26,404 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-19 14:49:26,627 INFO L384 CDTParser]: Found 1 translation units. [2024-11-19 14:49:26,628 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product25.cil.c [2024-11-19 14:49:26,652 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3e0ab41e0/6e2779b4dbdb4f05a698d23da315ca50/FLAG7f53be579 [2024-11-19 14:49:26,967 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3e0ab41e0/6e2779b4dbdb4f05a698d23da315ca50 [2024-11-19 14:49:26,969 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-19 14:49:26,970 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-19 14:49:26,971 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-19 14:49:26,971 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-19 14:49:26,981 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-19 14:49:26,983 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 02:49:26" (1/1) ... [2024-11-19 14:49:26,985 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@30c67d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:26, skipping insertion in model container [2024-11-19 14:49:26,985 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 02:49:26" (1/1) ... [2024-11-19 14:49:27,086 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-19 14:49:27,579 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-19 14:49:27,596 INFO L200 MainTranslator]: Completed pre-run [2024-11-19 14:49:27,604 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [48] [2024-11-19 14:49:27,606 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [86] [2024-11-19 14:49:27,606 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [452] [2024-11-19 14:49:27,606 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [553] [2024-11-19 14:49:27,607 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [562] [2024-11-19 14:49:27,607 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [916] [2024-11-19 14:49:27,607 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [1099] [2024-11-19 14:49:27,607 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [1770] [2024-11-19 14:49:27,608 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [1783] [2024-11-19 14:49:27,608 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1903] [2024-11-19 14:49:27,673 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-19 14:49:27,695 INFO L204 MainTranslator]: Completed translation [2024-11-19 14:49:27,695 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:27 WrapperNode [2024-11-19 14:49:27,696 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-19 14:49:27,696 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-19 14:49:27,697 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-19 14:49:27,697 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-19 14:49:27,702 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:27" (1/1) ... [2024-11-19 14:49:27,726 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:27" (1/1) ... [2024-11-19 14:49:27,848 INFO L138 Inliner]: procedures = 91, calls = 336, calls flagged for inlining = 189, calls inlined = 299, statements flattened = 8986 [2024-11-19 14:49:27,848 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-19 14:49:27,849 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-19 14:49:27,849 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-19 14:49:27,849 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-19 14:49:27,858 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:27" (1/1) ... [2024-11-19 14:49:27,858 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:27" (1/1) ... [2024-11-19 14:49:27,878 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:27" (1/1) ... [2024-11-19 14:49:27,935 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-19 14:49:27,935 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:27" (1/1) ... [2024-11-19 14:49:27,936 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:27" (1/1) ... [2024-11-19 14:49:27,994 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:27" (1/1) ... [2024-11-19 14:49:28,035 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:27" (1/1) ... [2024-11-19 14:49:28,048 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:27" (1/1) ... [2024-11-19 14:49:28,067 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:27" (1/1) ... [2024-11-19 14:49:28,089 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-19 14:49:28,090 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-19 14:49:28,090 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-19 14:49:28,091 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-19 14:49:28,091 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:27" (1/1) ... [2024-11-19 14:49:28,099 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-19 14:49:28,109 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-19 14:49:28,126 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-19 14:49:28,132 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-19 14:49:28,200 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-19 14:49:28,202 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-19 14:49:28,202 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-19 14:49:28,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-19 14:49:28,204 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-19 14:49:28,204 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-19 14:49:28,204 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-19 14:49:28,204 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-19 14:49:28,341 INFO L238 CfgBuilder]: Building ICFG [2024-11-19 14:49:28,344 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-19 14:49:32,263 INFO L? ?]: Removed 4085 outVars from TransFormulas that were not future-live. [2024-11-19 14:49:32,264 INFO L287 CfgBuilder]: Performing block encoding [2024-11-19 14:49:32,312 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-19 14:49:32,313 INFO L316 CfgBuilder]: Removed 1 assume(true) statements. [2024-11-19 14:49:32,313 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 02:49:32 BoogieIcfgContainer [2024-11-19 14:49:32,314 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-19 14:49:32,315 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-19 14:49:32,315 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-19 14:49:32,318 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-19 14:49:32,318 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-19 14:49:32,319 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 19.11 02:49:26" (1/3) ... [2024-11-19 14:49:32,319 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5804826f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 19.11 02:49:32, skipping insertion in model container [2024-11-19 14:49:32,319 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-19 14:49:32,320 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 02:49:27" (2/3) ... [2024-11-19 14:49:32,320 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5804826f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 19.11 02:49:32, skipping insertion in model container [2024-11-19 14:49:32,320 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-19 14:49:32,320 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 02:49:32" (3/3) ... [2024-11-19 14:49:32,321 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product25.cil.c [2024-11-19 14:49:32,401 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-11-19 14:49:32,401 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-11-19 14:49:32,401 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-19 14:49:32,401 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-19 14:49:32,401 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-19 14:49:32,401 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-11-19 14:49:32,401 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-19 14:49:32,402 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-19 14:49:32,413 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2575 states, 2574 states have (on average 1.8632478632478633) internal successors, (4796), 2574 states have internal predecessors, (4796), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:32,476 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1237 [2024-11-19 14:49:32,476 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:32,476 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:32,489 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:32,489 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:32,489 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-19 14:49:32,495 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2575 states, 2574 states have (on average 1.8632478632478633) internal successors, (4796), 2574 states have internal predecessors, (4796), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:32,522 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1237 [2024-11-19 14:49:32,523 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:32,523 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:32,525 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:32,525 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:32,531 INFO L745 eck$LassoCheckResult]: Stem: 182#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2437#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 957#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 587#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 725#valid_product_returnLabel#1true main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 273#L903true assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1674#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1987#__utac_acc__Specification1_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 2082#L1829true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 194#getOrigin_returnLabel#1true bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2348#L1463true assume 0 == initPersonOnFloor_~floor#1; 2540#L1464true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 685#L1571-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2511#L940true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 47#L952-2true havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1234#L1255true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1866#L1267-2true havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1046#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 449#bigMacCall_returnLabel#1true havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 397#L1829-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 416#getOrigin_returnLabel#2true angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 420#L1463-1true assume 0 == initPersonOnFloor_~floor#1; 96#L1464-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 73#L1571-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2285#L940-2true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1203#L952-5true havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1455#L1255-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 86#L1267-5true havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1050#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 767#angelinaCall_returnLabel#1true havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1521#L1188true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 92#isFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1409#L2760true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~7#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 274#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 973#L2908true assume !(0 != timeShift_~tmp___9~2#1); 2201#L2999true assume !(1 == ~doorState~0); 984#L2999-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 655#L2351true assume !(1 == stopRequestedInDirection_~dir#1); 1925#L2520true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1800#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1157#L3007true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1580#L2727true assume !(1 == ~currentHeading~0); 1816#L2737true assume !(0 == ~currentFloorID~0); 1876#L2737-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 129#L2743-1true havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1433#L3016-2true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1128#getCurrentFloorID_returnLabel#1true __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 633#L978true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2026#L979true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 771#areDoorsOpen_returnLabel#1true __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1086#L983true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1958#L1038true havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2130#timeShift_returnLabel#1true havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1394#L707-2true [2024-11-19 14:49:32,532 INFO L747 eck$LassoCheckResult]: Loop: 1394#L707-2true assume !false; 1908#L708true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 198#L711true assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 947#isBlocked_returnLabel#1true cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 942#L715true assume 1 != cleanup_~tmp___0~2#1; 1532#L715-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 108#L1188-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1560#isFloorCalling_returnLabel#22true anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1738#L2255true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 153#anyStopRequested_returnLabel#1true isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1180#isIdle_returnLabel#1true cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 484#L727true assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2463#L1188-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1196#isFloorCalling_returnLabel#27true stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 234#L2760-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~7#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 2196#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 2352#L2908-2true assume !(0 != timeShift_~tmp___9~2#1); 408#L2999-3true assume 1 == ~doorState~0;~doorState~0 := 0; 2013#L2999-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 145#L2351-2true assume !(1 == stopRequestedInDirection_~dir#1); 594#L2520-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1222#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 324#L3007-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 2358#L2727-3true assume !(1 == ~currentHeading~0); 1601#L2737-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 936#L2737-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 551#L2743-7true havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 347#L3016-5true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1437#getCurrentFloorID_returnLabel#2true __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1928#L978-1true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 752#L979-1true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1502#areDoorsOpen_returnLabel#6true __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1233#L983-2true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1567#L1038-1true havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2162#timeShift_returnLabel#2true havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1394#L707-2true [2024-11-19 14:49:32,537 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:32,537 INFO L85 PathProgramCache]: Analyzing trace with hash 1914460111, now seen corresponding path program 1 times [2024-11-19 14:49:32,544 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:32,544 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [255383359] [2024-11-19 14:49:32,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:32,545 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:32,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:32,831 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:32,832 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:32,832 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [255383359] [2024-11-19 14:49:32,833 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [255383359] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:32,833 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:32,833 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:32,834 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1911425649] [2024-11-19 14:49:32,835 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:32,838 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:32,839 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:32,839 INFO L85 PathProgramCache]: Analyzing trace with hash -657119561, now seen corresponding path program 1 times [2024-11-19 14:49:32,839 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:32,840 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1834717708] [2024-11-19 14:49:32,840 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:32,840 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:32,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:32,951 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:32,952 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:32,952 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1834717708] [2024-11-19 14:49:32,952 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1834717708] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:32,952 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:32,953 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-19 14:49:32,953 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1876235811] [2024-11-19 14:49:32,953 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:32,954 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:32,954 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:32,976 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-19 14:49:32,976 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-19 14:49:32,983 INFO L87 Difference]: Start difference. First operand has 2575 states, 2574 states have (on average 1.8632478632478633) internal successors, (4796), 2574 states have internal predecessors, (4796), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 6 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:33,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:33,298 INFO L93 Difference]: Finished difference Result 2569 states and 4782 transitions. [2024-11-19 14:49:33,300 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 2569 states and 4782 transitions. [2024-11-19 14:49:33,314 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1239 [2024-11-19 14:49:33,331 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 2569 states to 2551 states and 4762 transitions. [2024-11-19 14:49:33,332 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 2551 [2024-11-19 14:49:33,335 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 2551 [2024-11-19 14:49:33,335 INFO L73 IsDeterministic]: Start isDeterministic. Operand 2551 states and 4762 transitions. [2024-11-19 14:49:33,345 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:33,345 INFO L218 hiAutomatonCegarLoop]: Abstraction has 2551 states and 4762 transitions. [2024-11-19 14:49:33,362 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2551 states and 4762 transitions. [2024-11-19 14:49:33,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2551 to 2551. [2024-11-19 14:49:33,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2551 states, 2551 states have (on average 1.86671893375147) internal successors, (4762), 2550 states have internal predecessors, (4762), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:33,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2551 states to 2551 states and 4762 transitions. [2024-11-19 14:49:33,435 INFO L240 hiAutomatonCegarLoop]: Abstraction has 2551 states and 4762 transitions. [2024-11-19 14:49:33,436 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-19 14:49:33,438 INFO L425 stractBuchiCegarLoop]: Abstraction has 2551 states and 4762 transitions. [2024-11-19 14:49:33,439 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-19 14:49:33,440 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2551 states and 4762 transitions. [2024-11-19 14:49:33,450 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1239 [2024-11-19 14:49:33,451 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:33,451 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:33,455 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:33,455 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:33,456 INFO L745 eck$LassoCheckResult]: Stem: 5595#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 5596#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 6801#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6315#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 6316#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 5770#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 5771#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 7432#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 7585#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 5620#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5621#L1463 assume 0 == initPersonOnFloor_~floor#1; 7684#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 5541#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6463#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 5276#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 5277#L1255 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5893#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 6904#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 6088#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 6001#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 6002#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6030#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 5389#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 5239#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 5339#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 5877#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 7070#L1255-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5372#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 5373#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 6564#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6565#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 5384#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 5385#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 6035#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 6036#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 6926#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 7614#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 7706#L2908 assume !(0 != timeShift_~tmp___9~2#1); 7649#L2999 assume !(1 == ~doorState~0); 6827#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 6407#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 6408#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 5208#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 7022#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 7024#L2727 assume !(1 == ~currentHeading~0); 7379#L2737 assume !(0 == ~currentFloorID~0); 7509#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5469#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5470#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6988#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 6380#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 6381#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 6569#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 6570#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 5516#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7574#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 7232#L707-2 [2024-11-19 14:49:33,457 INFO L747 eck$LassoCheckResult]: Loop: 7232#L707-2 assume !false; 7233#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 5629#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 5630#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 6781#L715 assume 1 != cleanup_~tmp___0~2#1; 6782#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 5419#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 5420#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 7365#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 5529#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 5530#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 6155#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6156#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6104#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 5695#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 5696#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 5284#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 5578#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 5580#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 7707#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 6017#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 6018#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5507#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 5508#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 5483#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 5871#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 5873#L2727-3 assume !(1 == ~currentHeading~0); 7395#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6775#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6257#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5910#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 5911#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 7268#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 6544#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 6545#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 7099#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 6120#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7369#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 7232#L707-2 [2024-11-19 14:49:33,458 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:33,458 INFO L85 PathProgramCache]: Analyzing trace with hash -808199730, now seen corresponding path program 1 times [2024-11-19 14:49:33,458 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:33,458 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1195267360] [2024-11-19 14:49:33,458 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:33,459 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:33,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:33,578 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:33,578 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:33,578 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1195267360] [2024-11-19 14:49:33,578 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1195267360] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:33,579 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:33,579 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:33,579 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1155740330] [2024-11-19 14:49:33,579 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:33,579 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:33,579 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:33,580 INFO L85 PathProgramCache]: Analyzing trace with hash -889864710, now seen corresponding path program 1 times [2024-11-19 14:49:33,580 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:33,580 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [748674386] [2024-11-19 14:49:33,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:33,580 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:33,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:33,672 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:33,672 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:33,673 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [748674386] [2024-11-19 14:49:33,673 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [748674386] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:33,673 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:33,673 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:33,673 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [636429046] [2024-11-19 14:49:33,673 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:33,675 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:33,675 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:33,676 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-19 14:49:33,676 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-19 14:49:33,676 INFO L87 Difference]: Start difference. First operand 2551 states and 4762 transitions. cyclomatic complexity: 2212 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:34,724 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:34,724 INFO L93 Difference]: Finished difference Result 5138 states and 9510 transitions. [2024-11-19 14:49:34,724 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 5138 states and 9510 transitions. [2024-11-19 14:49:34,749 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2533 [2024-11-19 14:49:34,769 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 5138 states to 5138 states and 9510 transitions. [2024-11-19 14:49:34,770 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 5138 [2024-11-19 14:49:34,774 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 5138 [2024-11-19 14:49:34,774 INFO L73 IsDeterministic]: Start isDeterministic. Operand 5138 states and 9510 transitions. [2024-11-19 14:49:34,780 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:34,780 INFO L218 hiAutomatonCegarLoop]: Abstraction has 5138 states and 9510 transitions. [2024-11-19 14:49:34,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5138 states and 9510 transitions. [2024-11-19 14:49:34,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5138 to 5048. [2024-11-19 14:49:34,921 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5048 states, 5048 states have (on average 1.8660855784469097) internal successors, (9420), 5047 states have internal predecessors, (9420), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:34,957 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5048 states to 5048 states and 9420 transitions. [2024-11-19 14:49:34,957 INFO L240 hiAutomatonCegarLoop]: Abstraction has 5048 states and 9420 transitions. [2024-11-19 14:49:34,957 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-19 14:49:34,958 INFO L425 stractBuchiCegarLoop]: Abstraction has 5048 states and 9420 transitions. [2024-11-19 14:49:34,958 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-19 14:49:34,958 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5048 states and 9420 transitions. [2024-11-19 14:49:35,017 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2484 [2024-11-19 14:49:35,018 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:35,018 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:35,024 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:35,024 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:35,025 INFO L745 eck$LassoCheckResult]: Stem: 13302#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 13303#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 14555#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 14037#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 14038#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 13479#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 13480#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 15263#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 15460#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 13328#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 13329#L1463 assume 0 == initPersonOnFloor_~floor#1; 15608#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 13248#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 14192#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 12982#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 12983#L1255 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 14875#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 14662#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 14663#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 17791#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 13748#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 13749#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 17758#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 17754#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 17752#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 17748#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 17747#L1255-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 15087#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 17742#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 17741#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 17740#L1188 assume !(0 == isFloorCalling_~floorID#1); 17684#L1192 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 17680#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 17679#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 13750#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 13751#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 14689#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 15504#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 15666#L2908 assume !(0 != timeShift_~tmp___9~2#1); 15553#L2999 assume !(1 == ~doorState~0); 14582#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 14134#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 14135#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 12914#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 14789#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 14791#L2727 assume !(1 == ~currentHeading~0); 16784#L2737 assume !(0 == ~currentFloorID~0); 16780#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 13176#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 13177#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 14753#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 14105#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 14106#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 14303#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 14304#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 13223#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 15448#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 15028#L707-2 [2024-11-19 14:49:35,028 INFO L747 eck$LassoCheckResult]: Loop: 15028#L707-2 assume !false; 15029#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 15709#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 15708#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 15707#L715 assume 1 != cleanup_~tmp___0~2#1; 15706#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 15668#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 15667#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 15310#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 15311#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 14820#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 13873#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 13874#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 15672#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 15806#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 15669#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 15670#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 14087#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 13285#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 13287#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 17578#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 13731#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 13732#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 15786#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 14045#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 13190#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 13581#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 13583#L2727-3 assume !(1 == ~currentHeading~0); 15220#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 15221#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 13980#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 13622#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 13623#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 15068#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 14277#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 14278#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 14873#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 13840#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 15532#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 15028#L707-2 [2024-11-19 14:49:35,029 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:35,029 INFO L85 PathProgramCache]: Analyzing trace with hash 1510766569, now seen corresponding path program 1 times [2024-11-19 14:49:35,029 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:35,029 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1375272152] [2024-11-19 14:49:35,030 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:35,030 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:35,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:35,129 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:35,129 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:35,130 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1375272152] [2024-11-19 14:49:35,130 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1375272152] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:35,130 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:35,130 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:35,130 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1866509513] [2024-11-19 14:49:35,130 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:35,133 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:35,133 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:35,134 INFO L85 PathProgramCache]: Analyzing trace with hash -64448559, now seen corresponding path program 1 times [2024-11-19 14:49:35,134 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:35,134 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1145479370] [2024-11-19 14:49:35,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:35,134 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:35,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:35,248 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:35,249 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:35,249 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1145479370] [2024-11-19 14:49:35,249 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1145479370] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:35,249 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:35,249 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:35,249 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1764436522] [2024-11-19 14:49:35,249 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:35,250 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:35,250 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:35,250 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-19 14:49:35,250 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-19 14:49:35,251 INFO L87 Difference]: Start difference. First operand 5048 states and 9420 transitions. cyclomatic complexity: 4373 Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:36,837 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:36,837 INFO L93 Difference]: Finished difference Result 9032 states and 16821 transitions. [2024-11-19 14:49:36,838 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9032 states and 16821 transitions. [2024-11-19 14:49:36,897 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4528 [2024-11-19 14:49:36,950 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9032 states to 9032 states and 16821 transitions. [2024-11-19 14:49:36,951 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9032 [2024-11-19 14:49:36,962 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9032 [2024-11-19 14:49:36,963 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9032 states and 16821 transitions. [2024-11-19 14:49:36,974 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:36,975 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9032 states and 16821 transitions. [2024-11-19 14:49:36,981 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9032 states and 16821 transitions. [2024-11-19 14:49:37,093 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9032 to 9014. [2024-11-19 14:49:37,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9014 states, 9014 states have (on average 1.8627690259596184) internal successors, (16791), 9013 states have internal predecessors, (16791), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:37,133 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9014 states to 9014 states and 16791 transitions. [2024-11-19 14:49:37,134 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9014 states and 16791 transitions. [2024-11-19 14:49:37,134 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-19 14:49:37,135 INFO L425 stractBuchiCegarLoop]: Abstraction has 9014 states and 16791 transitions. [2024-11-19 14:49:37,135 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-19 14:49:37,135 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9014 states and 16791 transitions. [2024-11-19 14:49:37,164 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4519 [2024-11-19 14:49:37,165 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:37,165 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:37,168 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:37,169 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:37,169 INFO L745 eck$LassoCheckResult]: Stem: 27402#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 27403#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 28646#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 28140#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 28141#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 27583#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 27584#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 29353#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 29535#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 27429#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 27430#L1463 assume 0 == initPersonOnFloor_~floor#1; 29662#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 27348#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 28290#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 27081#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 27082#L1255 assume !(0 == callOnFloor_~floorID#1); 28968#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 27707#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 29755#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 29754#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 29750#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 29747#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 29745#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 27196#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 27044#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 29651#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 27690#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 29176#L1255-2 assume !(0 == callOnFloor_~floorID#1); 29177#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 27178#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 27179#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 28398#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 28399#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 29711#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 29710#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 29709#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 28778#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 28779#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 29577#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 29758#L2908 assume !(0 != timeShift_~tmp___9~2#1); 29759#L2999 assume !(1 == ~doorState~0); 35610#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 35609#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 35572#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 35560#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 35559#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 29288#L2727 assume !(1 == ~currentHeading~0); 29289#L2737 assume !(0 == ~currentFloorID~0); 29443#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 29480#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 29937#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 29935#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 29933#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 29928#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 29921#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 29900#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 29893#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 29891#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 29890#L707-2 [2024-11-19 14:49:37,170 INFO L747 eck$LassoCheckResult]: Loop: 29890#L707-2 assume !false; 29889#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 29888#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 29887#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 29886#L715 assume 1 != cleanup_~tmp___0~2#1; 29885#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 29884#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 29867#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 29857#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 29846#L2259 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 29841#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 29840#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 29839#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 29838#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 29837#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 29836#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 29834#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 29830#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 29827#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 29826#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 29825#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 29812#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 29811#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 29793#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 29780#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 29769#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 29767#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 29768#L2727-3 assume !(1 == ~currentHeading~0); 35936#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 28618#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 28619#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 29938#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 29936#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 29934#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 29931#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 29926#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 29911#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 29894#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 29892#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 29890#L707-2 [2024-11-19 14:49:37,171 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:37,171 INFO L85 PathProgramCache]: Analyzing trace with hash -859025896, now seen corresponding path program 1 times [2024-11-19 14:49:37,171 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:37,171 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [123601089] [2024-11-19 14:49:37,172 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:37,172 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:37,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:37,238 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:37,238 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:37,239 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [123601089] [2024-11-19 14:49:37,239 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [123601089] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:37,239 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:37,239 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:37,239 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1184550414] [2024-11-19 14:49:37,239 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:37,240 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:37,240 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:37,241 INFO L85 PathProgramCache]: Analyzing trace with hash -1863622482, now seen corresponding path program 1 times [2024-11-19 14:49:37,241 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:37,241 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [564158084] [2024-11-19 14:49:37,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:37,241 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:37,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:37,290 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:37,293 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:37,293 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [564158084] [2024-11-19 14:49:37,293 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [564158084] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:37,293 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:37,293 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:37,294 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [908883332] [2024-11-19 14:49:37,294 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:37,294 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:37,294 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:37,294 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:37,294 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:37,295 INFO L87 Difference]: Start difference. First operand 9014 states and 16791 transitions. cyclomatic complexity: 7778 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:37,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:37,476 INFO L93 Difference]: Finished difference Result 16123 states and 30033 transitions. [2024-11-19 14:49:37,477 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16123 states and 30033 transitions. [2024-11-19 14:49:37,701 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8912 [2024-11-19 14:49:37,783 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16123 states to 16123 states and 30033 transitions. [2024-11-19 14:49:37,783 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16123 [2024-11-19 14:49:37,798 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16123 [2024-11-19 14:49:37,799 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16123 states and 30033 transitions. [2024-11-19 14:49:37,822 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:37,822 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16123 states and 30033 transitions. [2024-11-19 14:49:37,837 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16123 states and 30033 transitions. [2024-11-19 14:49:37,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16123 to 16123. [2024-11-19 14:49:38,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16123 states, 16123 states have (on average 1.8627426657569932) internal successors, (30033), 16122 states have internal predecessors, (30033), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:38,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16123 states to 16123 states and 30033 transitions. [2024-11-19 14:49:38,032 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16123 states and 30033 transitions. [2024-11-19 14:49:38,032 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-19 14:49:38,033 INFO L425 stractBuchiCegarLoop]: Abstraction has 16123 states and 30033 transitions. [2024-11-19 14:49:38,033 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-19 14:49:38,034 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16123 states and 30033 transitions. [2024-11-19 14:49:38,073 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8912 [2024-11-19 14:49:38,074 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:38,074 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:38,076 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:38,077 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:38,078 INFO L745 eck$LassoCheckResult]: Stem: 52551#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 52552#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 53791#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 53289#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 53290#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 52728#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 52729#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 54493#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 54680#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 52577#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 52578#L1463 assume 0 == initPersonOnFloor_~floor#1; 54808#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 52497#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 53439#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 52230#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 52231#L1255 assume !(0 == callOnFloor_~floorID#1); 54117#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 52851#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 54617#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 53053#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 53054#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 52990#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 52991#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 52345#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 52194#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 54791#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 52835#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 54327#L1255-2 assume !(0 == callOnFloor_~floorID#1); 54328#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 52327#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 52328#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 53547#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 53548#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 54858#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 54856#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 54853#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 54854#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 56387#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 56386#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 56382#L2908 assume !(0 != timeShift_~tmp___9~2#1); 56381#L2999 assume !(1 == ~doorState~0); 55505#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 55503#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 55178#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 55168#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 55166#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 55165#L2727 assume !(1 == ~currentHeading~0); 55071#L2737 assume !(0 == ~currentFloorID~0); 55053#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 55045#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 55043#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 55041#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 55039#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 55034#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 55027#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 55006#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 54999#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 54997#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 54994#L707-2 [2024-11-19 14:49:38,078 INFO L747 eck$LassoCheckResult]: Loop: 54994#L707-2 assume !false; 54992#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 54991#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 54990#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 54989#L715 assume 1 != cleanup_~tmp___0~2#1; 54988#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 54986#L1188-21 assume !(0 == isFloorCalling_~floorID#1); 54984#L1192-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 54964#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 54958#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 54946#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 54945#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 54944#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 54942#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 54941#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 54939#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 54935#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 54936#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 55845#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 55844#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 55842#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 55841#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 55839#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 55835#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 55337#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 55326#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 55323#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 55322#L2727-3 assume !(1 == ~currentHeading~0); 55115#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 55062#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 55049#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 55044#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 55042#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 55040#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 55037#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 55032#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 55017#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 55000#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 54998#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 54994#L707-2 [2024-11-19 14:49:38,079 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:38,079 INFO L85 PathProgramCache]: Analyzing trace with hash -859025896, now seen corresponding path program 2 times [2024-11-19 14:49:38,079 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:38,079 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [182232556] [2024-11-19 14:49:38,079 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-19 14:49:38,080 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:38,098 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:49:38,098 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:38,137 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:38,138 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:38,138 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [182232556] [2024-11-19 14:49:38,138 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [182232556] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:38,138 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:38,138 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:38,138 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1085083665] [2024-11-19 14:49:38,138 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:38,138 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:38,139 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:38,139 INFO L85 PathProgramCache]: Analyzing trace with hash 85645251, now seen corresponding path program 1 times [2024-11-19 14:49:38,139 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:38,139 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1823918071] [2024-11-19 14:49:38,139 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:38,139 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:38,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:38,160 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:38,161 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:38,161 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1823918071] [2024-11-19 14:49:38,161 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1823918071] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:38,161 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:38,161 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:38,161 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [226830564] [2024-11-19 14:49:38,161 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:38,162 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:38,162 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:38,162 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-19 14:49:38,162 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-19 14:49:38,163 INFO L87 Difference]: Start difference. First operand 16123 states and 30033 transitions. cyclomatic complexity: 13911 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:38,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:38,558 INFO L93 Difference]: Finished difference Result 15895 states and 29559 transitions. [2024-11-19 14:49:38,558 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15895 states and 29559 transitions. [2024-11-19 14:49:38,610 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8732 [2024-11-19 14:49:38,653 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15895 states to 15895 states and 29559 transitions. [2024-11-19 14:49:38,653 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15895 [2024-11-19 14:49:38,904 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15895 [2024-11-19 14:49:38,905 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15895 states and 29559 transitions. [2024-11-19 14:49:38,920 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:38,922 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15895 states and 29559 transitions. [2024-11-19 14:49:38,930 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15895 states and 29559 transitions. [2024-11-19 14:49:39,026 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15895 to 15895. [2024-11-19 14:49:39,046 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15895 states, 15895 states have (on average 1.8596413966656182) internal successors, (29559), 15894 states have internal predecessors, (29559), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:39,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15895 states to 15895 states and 29559 transitions. [2024-11-19 14:49:39,073 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15895 states and 29559 transitions. [2024-11-19 14:49:39,073 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-19 14:49:39,074 INFO L425 stractBuchiCegarLoop]: Abstraction has 15895 states and 29559 transitions. [2024-11-19 14:49:39,074 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-19 14:49:39,074 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15895 states and 29559 transitions. [2024-11-19 14:49:39,109 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8732 [2024-11-19 14:49:39,110 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:39,110 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:39,112 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:39,112 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:39,113 INFO L745 eck$LassoCheckResult]: Stem: 84565#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 84566#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 85783#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 85287#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 85288#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 84739#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 84740#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 86448#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 86611#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 84590#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 84591#L1463 assume 0 == initPersonOnFloor_~floor#1; 86738#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 84514#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 85435#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 84254#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 84255#L1255 assume !(0 == callOnFloor_~floorID#1); 86100#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 84859#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 85888#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 85056#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 84967#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 84968#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 87716#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 84366#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 84218#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 86725#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 84842#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 86299#L1255-2 assume !(0 == callOnFloor_~floorID#1); 86300#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 87260#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 87259#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 85540#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 85541#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 86355#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 87264#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 87257#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 87248#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 87245#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 87243#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 87240#L2908 assume !(0 != timeShift_~tmp___9~2#1); 87238#L2999 assume !(1 == ~doorState~0); 87237#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 87031#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 86928#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 86915#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 86905#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 86897#L2727 assume !(1 == ~currentHeading~0); 86888#L2737 assume !(0 == ~currentFloorID~0); 86884#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 86879#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 86880#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 88131#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 88128#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 88129#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 88130#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 86817#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 86812#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 86804#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 86802#L707-2 [2024-11-19 14:49:39,113 INFO L747 eck$LassoCheckResult]: Loop: 86802#L707-2 assume !false; 86800#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 86798#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 86796#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 86793#L715 assume 1 != cleanup_~tmp___0~2#1; 86792#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 86791#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 86790#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 86788#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 86786#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 86458#L1188-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 84668#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 84905#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 84906#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 87703#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 87701#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 87671#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 87670#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 87665#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 87658#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 87653#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 87651#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 87649#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 87648#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 87643#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 87617#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 87597#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 87376#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 87364#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 87360#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 87358#L2727-3 assume !(1 == ~currentHeading~0); 87274#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 87270#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 87266#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 86878#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 86874#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 86870#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 86865#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 86866#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 86828#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 86809#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 86805#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 86802#L707-2 [2024-11-19 14:49:39,114 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:39,114 INFO L85 PathProgramCache]: Analyzing trace with hash -859025896, now seen corresponding path program 3 times [2024-11-19 14:49:39,114 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:39,114 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [843200024] [2024-11-19 14:49:39,114 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-11-19 14:49:39,114 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:39,126 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2024-11-19 14:49:39,126 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:39,153 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:39,154 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:39,154 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [843200024] [2024-11-19 14:49:39,154 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [843200024] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:39,154 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:39,154 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:39,154 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1316187342] [2024-11-19 14:49:39,155 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:39,155 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:39,155 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:39,155 INFO L85 PathProgramCache]: Analyzing trace with hash 1331043666, now seen corresponding path program 1 times [2024-11-19 14:49:39,155 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:39,155 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [478397091] [2024-11-19 14:49:39,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:39,156 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:39,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:39,187 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:39,187 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:39,187 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [478397091] [2024-11-19 14:49:39,187 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [478397091] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:39,188 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:39,188 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:39,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [70586940] [2024-11-19 14:49:39,188 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:39,188 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:39,188 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:39,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:39,189 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:39,189 INFO L87 Difference]: Start difference. First operand 15895 states and 29559 transitions. cyclomatic complexity: 13665 Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:40,084 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:40,085 INFO L93 Difference]: Finished difference Result 15895 states and 29415 transitions. [2024-11-19 14:49:40,085 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15895 states and 29415 transitions. [2024-11-19 14:49:40,133 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8732 [2024-11-19 14:49:40,339 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15895 states to 15895 states and 29415 transitions. [2024-11-19 14:49:40,340 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15895 [2024-11-19 14:49:40,352 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15895 [2024-11-19 14:49:40,352 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15895 states and 29415 transitions. [2024-11-19 14:49:40,364 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:40,364 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15895 states and 29415 transitions. [2024-11-19 14:49:40,373 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15895 states and 29415 transitions. [2024-11-19 14:49:40,522 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15895 to 15895. [2024-11-19 14:49:40,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15895 states, 15895 states have (on average 1.8505819440075495) internal successors, (29415), 15894 states have internal predecessors, (29415), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:40,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15895 states to 15895 states and 29415 transitions. [2024-11-19 14:49:40,572 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15895 states and 29415 transitions. [2024-11-19 14:49:40,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-19 14:49:40,575 INFO L425 stractBuchiCegarLoop]: Abstraction has 15895 states and 29415 transitions. [2024-11-19 14:49:40,575 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-19 14:49:40,575 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15895 states and 29415 transitions. [2024-11-19 14:49:40,626 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8732 [2024-11-19 14:49:40,626 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:40,626 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:40,631 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:40,631 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:40,631 INFO L745 eck$LassoCheckResult]: Stem: 116364#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 116365#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 117585#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 117086#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 117087#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 116537#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 116538#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 118258#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 118433#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 116389#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 116390#L1463 assume 0 == initPersonOnFloor_~floor#1; 118550#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 116314#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 117238#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 116053#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 116054#L1255 assume !(0 == callOnFloor_~floorID#1); 117905#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 116660#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 119488#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 119487#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 119483#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 119480#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 119479#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 119374#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 119370#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 119368#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 119364#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 119363#L1255-2 assume !(0 == callOnFloor_~floorID#1); 119362#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 119358#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 119357#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 119355#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 119351#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 119349#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 119346#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 119173#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 117718#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 117719#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 118466#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 118605#L2908 assume !(0 != timeShift_~tmp___9~2#1); 118607#L2999 assume !(1 == ~doorState~0); 118836#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 118830#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 118737#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 118726#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 118716#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 118708#L2727 assume !(1 == ~currentHeading~0); 118699#L2737 assume !(0 == ~currentFloorID~0); 118695#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 118690#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 118691#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 119556#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 119554#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 119555#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 118656#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 118657#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 119541#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 119539#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 119538#L707-2 [2024-11-19 14:49:40,632 INFO L747 eck$LassoCheckResult]: Loop: 119538#L707-2 assume !false; 119537#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 119536#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 119535#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 119534#L715 assume 1 != cleanup_~tmp___0~2#1; 119533#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 119532#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 119531#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 119529#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 119527#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 119526#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 119525#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 118314#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 118315#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 119504#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 119502#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 119491#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 119271#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 119270#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 119269#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 119262#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 119258#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 119255#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 119253#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 119250#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 119248#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 119247#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 119245#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 119091#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 119079#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 119075#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 119073#L2727-3 assume !(1 == ~currentHeading~0); 119060#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 119054#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 119026#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 118689#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 118685#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 118681#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 118676#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 118677#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 118640#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 118621#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 118622#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 119538#L707-2 [2024-11-19 14:49:40,632 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:40,633 INFO L85 PathProgramCache]: Analyzing trace with hash -859025896, now seen corresponding path program 4 times [2024-11-19 14:49:40,633 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:40,633 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1234304358] [2024-11-19 14:49:40,633 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-11-19 14:49:40,633 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:40,649 INFO L227 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-11-19 14:49:40,649 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:40,669 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:40,669 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:40,669 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1234304358] [2024-11-19 14:49:40,669 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1234304358] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:40,669 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:40,670 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:40,670 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1387677396] [2024-11-19 14:49:40,670 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:40,670 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:40,670 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:40,670 INFO L85 PathProgramCache]: Analyzing trace with hash 633024870, now seen corresponding path program 1 times [2024-11-19 14:49:40,670 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:40,671 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [673800800] [2024-11-19 14:49:40,671 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:40,671 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:40,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:40,804 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:40,805 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:40,805 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [673800800] [2024-11-19 14:49:40,805 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [673800800] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:40,805 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:40,805 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:40,806 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2001833433] [2024-11-19 14:49:40,806 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:40,806 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:40,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:40,806 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:40,806 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:40,807 INFO L87 Difference]: Start difference. First operand 15895 states and 29415 transitions. cyclomatic complexity: 13521 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:40,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:40,962 INFO L93 Difference]: Finished difference Result 15924 states and 29444 transitions. [2024-11-19 14:49:40,962 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15924 states and 29444 transitions. [2024-11-19 14:49:41,018 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8750 [2024-11-19 14:49:41,075 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15924 states to 15924 states and 29444 transitions. [2024-11-19 14:49:41,076 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15924 [2024-11-19 14:49:41,092 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15924 [2024-11-19 14:49:41,093 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15924 states and 29444 transitions. [2024-11-19 14:49:41,109 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:41,109 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15924 states and 29444 transitions. [2024-11-19 14:49:41,120 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15924 states and 29444 transitions. [2024-11-19 14:49:41,500 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15924 to 15913. [2024-11-19 14:49:41,518 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15913 states, 15913 states have (on average 1.8496198077043926) internal successors, (29433), 15912 states have internal predecessors, (29433), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:41,547 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15913 states to 15913 states and 29433 transitions. [2024-11-19 14:49:41,547 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15913 states and 29433 transitions. [2024-11-19 14:49:41,553 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:41,555 INFO L425 stractBuchiCegarLoop]: Abstraction has 15913 states and 29433 transitions. [2024-11-19 14:49:41,555 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-19 14:49:41,555 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15913 states and 29433 transitions. [2024-11-19 14:49:41,597 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8744 [2024-11-19 14:49:41,597 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:41,597 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:41,599 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:41,599 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:41,599 INFO L745 eck$LassoCheckResult]: Stem: 148193#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 148194#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 149425#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 148918#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 148919#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 148366#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 148367#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 150119#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 150295#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 148218#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 148219#L1463 assume 0 == initPersonOnFloor_~floor#1; 150425#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 148143#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 149073#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 147880#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 147881#L1255 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 149744#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 151024#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 151023#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 148595#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 148596#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 148625#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 148632#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 147941#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 147942#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 149710#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 149711#L1255-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 147974#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 147975#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 149180#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 149181#L1188 assume !(0 == isFloorCalling_~floorID#1); 150779#L1192 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 150774#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 150773#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 150769#L2164 assume !(0 == buttonForFloorIsPressed_~floorID#1); 150717#L2168 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 150711#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 150709#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 150707#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 150705#L2908 assume !(0 != timeShift_~tmp___9~2#1); 150701#L2999 assume !(1 == ~doorState~0); 150699#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 150696#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 150697#L2520 assume !(0 == ~currentFloorID~0); 150763#L2526 assume !(~currentFloorID~0 > 0); 148181#$Ultimate##2398 assume ~currentFloorID~0 > 0; 150754#L2543 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 150753#L2544 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 150435#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 161949#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 161947#L2727 assume !(1 == ~currentHeading~0); 161946#L2737 assume !(0 == ~currentFloorID~0); 161944#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 161914#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 161912#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 161910#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 161908#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 161909#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 161907#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 161899#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 161882#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 161879#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 161878#L707-2 [2024-11-19 14:49:41,600 INFO L747 eck$LassoCheckResult]: Loop: 161878#L707-2 assume !false; 161872#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 161870#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 161869#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 161868#L715 assume 1 != cleanup_~tmp___0~2#1; 161867#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 161866#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 161865#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 159726#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 159725#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 159724#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 159723#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 159721#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 159722#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 162336#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 162317#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 149502#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 149503#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 162323#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 162318#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 150374#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 150375#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 160660#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 162042#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 162040#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 162035#L2520-2 assume !(0 == ~currentFloorID~0); 162033#L2526-2 assume !(~currentFloorID~0 > 0); 162029#$Ultimate##4992 assume ~currentFloorID~0 > 0; 162074#L2543-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 150380#L2544-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 150381#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 161995#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 161993#L2727-3 assume !(1 == ~currentHeading~0); 161992#L2737-9 assume !(0 == ~currentFloorID~0); 161990#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 161960#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 161958#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 161956#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 161954#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 161955#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 161953#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 161888#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 161881#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 161880#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 161878#L707-2 [2024-11-19 14:49:41,600 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:41,600 INFO L85 PathProgramCache]: Analyzing trace with hash 1266470023, now seen corresponding path program 1 times [2024-11-19 14:49:41,601 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:41,601 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1029734440] [2024-11-19 14:49:41,602 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:41,602 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:41,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:41,670 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:41,670 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:41,671 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1029734440] [2024-11-19 14:49:41,672 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1029734440] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:41,672 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:41,672 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:41,672 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [158949363] [2024-11-19 14:49:41,672 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:41,674 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:41,674 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:41,675 INFO L85 PathProgramCache]: Analyzing trace with hash 1859070901, now seen corresponding path program 1 times [2024-11-19 14:49:41,675 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:41,675 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [286844886] [2024-11-19 14:49:41,675 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:41,675 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:41,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:41,900 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:41,900 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:41,900 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [286844886] [2024-11-19 14:49:41,900 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [286844886] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:41,900 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:41,900 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:41,900 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [375933155] [2024-11-19 14:49:41,903 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:41,903 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:41,903 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:41,905 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:41,905 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:41,905 INFO L87 Difference]: Start difference. First operand 15913 states and 29433 transitions. cyclomatic complexity: 13521 Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:42,670 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:42,670 INFO L93 Difference]: Finished difference Result 23725 states and 43604 transitions. [2024-11-19 14:49:42,670 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23725 states and 43604 transitions. [2024-11-19 14:49:42,898 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13070 [2024-11-19 14:49:42,968 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23725 states to 23725 states and 43604 transitions. [2024-11-19 14:49:42,969 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23725 [2024-11-19 14:49:42,988 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23725 [2024-11-19 14:49:42,989 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23725 states and 43604 transitions. [2024-11-19 14:49:43,011 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:43,011 INFO L218 hiAutomatonCegarLoop]: Abstraction has 23725 states and 43604 transitions. [2024-11-19 14:49:43,025 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23725 states and 43604 transitions. [2024-11-19 14:49:43,363 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23725 to 23553. [2024-11-19 14:49:43,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23553 states, 23553 states have (on average 1.8395958052052817) internal successors, (43328), 23552 states have internal predecessors, (43328), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:43,432 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23553 states to 23553 states and 43328 transitions. [2024-11-19 14:49:43,432 INFO L240 hiAutomatonCegarLoop]: Abstraction has 23553 states and 43328 transitions. [2024-11-19 14:49:43,433 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:43,433 INFO L425 stractBuchiCegarLoop]: Abstraction has 23553 states and 43328 transitions. [2024-11-19 14:49:43,433 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-19 14:49:43,433 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 23553 states and 43328 transitions. [2024-11-19 14:49:43,502 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12984 [2024-11-19 14:49:43,502 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:43,502 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:43,505 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:43,506 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:43,506 INFO L745 eck$LassoCheckResult]: Stem: 187836#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 187837#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 189084#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 188565#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 188566#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 188009#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 188010#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 189794#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 189974#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 187861#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 187862#L1463 assume 0 == initPersonOnFloor_~floor#1; 190121#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 187784#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 188721#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 187525#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 187526#L1255 assume !(0 == callOnFloor_~floorID#1); 189410#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 188130#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 190264#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 190263#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 190259#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 190256#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 190254#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 187636#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 187489#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 190104#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 188113#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 189617#L1255-2 assume !(0 == callOnFloor_~floorID#1); 189618#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 187619#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 187620#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 188834#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 188835#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 190220#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 190218#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 190214#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 190215#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 190410#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 190409#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 190407#L2908 assume !(0 != timeShift_~tmp___9~2#1); 190406#L2999 assume !(1 == ~doorState~0); 190405#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 190403#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 190404#L2520 assume !(0 == ~currentFloorID~0); 190195#L2526 assume !(~currentFloorID~0 > 0); 190186#$Ultimate##2398 assume ~currentFloorID~0 > 0; 190185#L2543 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 190183#L2544 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 190184#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 190888#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 189726#L2727 assume !(1 == ~currentHeading~0); 189727#L2737 assume !(0 == ~currentFloorID~0); 189882#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 203646#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 203644#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 203642#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 203640#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 203641#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 203639#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 203631#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 203614#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 203611#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 203610#L707-2 [2024-11-19 14:49:43,506 INFO L747 eck$LassoCheckResult]: Loop: 203610#L707-2 assume !false; 203609#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 203608#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 203607#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 203606#L715 assume 1 != cleanup_~tmp___0~2#1; 203605#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 203573#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 203571#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 203569#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 203570#L2259 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 191051#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 210857#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 210856#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 210855#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 189361#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 189362#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 210055#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 210072#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 210891#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 210057#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 210058#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 210301#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 210299#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 210298#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 210296#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 210297#L2520-2 assume !(0 == ~currentFloorID~0); 210126#L2526-2 assume !(~currentFloorID~0 > 0); 210121#$Ultimate##4992 assume ~currentFloorID~0 > 0; 210152#L2543-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 210098#L2544-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 188569#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 210397#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 210394#L2727-3 assume !(1 == ~currentHeading~0); 210392#L2737-9 assume !(0 == ~currentFloorID~0); 203711#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 203666#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 203664#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 203662#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 203660#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 203661#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 203659#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 203620#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 203613#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 203612#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 203610#L707-2 [2024-11-19 14:49:43,507 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:43,507 INFO L85 PathProgramCache]: Analyzing trace with hash -1473127167, now seen corresponding path program 1 times [2024-11-19 14:49:43,507 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:43,507 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2037628064] [2024-11-19 14:49:43,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:43,507 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:43,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:43,747 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:43,747 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:43,747 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2037628064] [2024-11-19 14:49:43,747 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2037628064] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:43,747 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:43,747 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:43,748 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [797960689] [2024-11-19 14:49:43,748 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:43,748 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:43,748 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:43,748 INFO L85 PathProgramCache]: Analyzing trace with hash 1168663800, now seen corresponding path program 1 times [2024-11-19 14:49:43,748 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:43,748 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1104798877] [2024-11-19 14:49:43,749 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:43,749 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:43,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:43,779 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:43,779 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:43,779 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1104798877] [2024-11-19 14:49:43,779 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1104798877] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:43,779 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:43,779 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:43,780 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1032682520] [2024-11-19 14:49:43,780 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:43,780 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:43,780 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:43,780 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:43,780 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:43,780 INFO L87 Difference]: Start difference. First operand 23553 states and 43328 transitions. cyclomatic complexity: 19776 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:44,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:44,598 INFO L93 Difference]: Finished difference Result 16396 states and 30033 transitions. [2024-11-19 14:49:44,598 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16396 states and 30033 transitions. [2024-11-19 14:49:44,637 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13037 [2024-11-19 14:49:44,675 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16396 states to 16396 states and 30033 transitions. [2024-11-19 14:49:44,675 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16396 [2024-11-19 14:49:44,685 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16396 [2024-11-19 14:49:44,686 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16396 states and 30033 transitions. [2024-11-19 14:49:44,699 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:44,699 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16396 states and 30033 transitions. [2024-11-19 14:49:44,708 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16396 states and 30033 transitions. [2024-11-19 14:49:44,955 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16396 to 16387. [2024-11-19 14:49:44,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16387 states, 16387 states have (on average 1.8318179044364435) internal successors, (30018), 16386 states have internal predecessors, (30018), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:45,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16387 states to 16387 states and 30018 transitions. [2024-11-19 14:49:45,008 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16387 states and 30018 transitions. [2024-11-19 14:49:45,008 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-19 14:49:45,010 INFO L425 stractBuchiCegarLoop]: Abstraction has 16387 states and 30018 transitions. [2024-11-19 14:49:45,010 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-19 14:49:45,010 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16387 states and 30018 transitions. [2024-11-19 14:49:45,072 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13028 [2024-11-19 14:49:45,072 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:45,072 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:45,074 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:45,074 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:45,075 INFO L745 eck$LassoCheckResult]: Stem: 227769#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 227770#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 228920#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 228439#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 228440#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 227921#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 227922#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 229548#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 229718#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 227790#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 227791#L1463 assume 0 == initPersonOnFloor_~floor#1; 229836#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 227725#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 228587#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 227481#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 227482#L1255 assume !(0 == callOnFloor_~floorID#1); 229209#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 228031#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 229943#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 229942#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 229938#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 229933#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 229931#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 229903#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 229899#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 229897#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 229893#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 229892#L1255-2 assume !(0 == callOnFloor_~floorID#1); 229891#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 229887#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 229886#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 229885#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 229884#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 229883#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 229882#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 228171#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 228172#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 229038#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 229755#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 229944#L2908 assume !(0 != timeShift_~tmp___9~2#1); 229793#L2999 assume !(1 == ~doorState~0); 228945#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 228535#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 228536#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 229567#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 229130#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 229131#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 229328#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 229173#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 228613#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 228534#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 229320#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 227877#L2727-2 assume !(1 == ~currentHeading~0); 227690#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 227691#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 228806#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 227657#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 237440#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 237436#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 237437#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 237432#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 237389#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 237380#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 237376#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 237374#L707-2 [2024-11-19 14:49:45,075 INFO L747 eck$LassoCheckResult]: Loop: 237374#L707-2 assume !false; 237372#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 237364#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 237365#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 237355#L715 assume 1 != cleanup_~tmp___0~2#1; 237356#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 233880#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 233881#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 230124#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 230125#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 237370#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 243663#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 243659#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 243642#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 243639#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 243638#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 243637#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 243636#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 230070#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 230069#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 230067#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 230062#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 230060#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 230059#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 230057#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 230056#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 230055#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 230053#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 230054#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 228155#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 242282#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 242280#L2782-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~24#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 242278#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 242276#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 242255#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 242236#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 242234#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 242233#L2727-5 assume !(1 == ~currentHeading~0); 242183#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 237560#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 237547#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 237544#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 237542#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 237541#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 237540#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 237539#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 237400#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 237381#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 237377#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 237374#L707-2 [2024-11-19 14:49:45,076 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:45,076 INFO L85 PathProgramCache]: Analyzing trace with hash -2087150209, now seen corresponding path program 1 times [2024-11-19 14:49:45,076 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:45,076 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [373766087] [2024-11-19 14:49:45,076 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:45,076 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:45,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:45,167 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:45,167 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:45,168 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [373766087] [2024-11-19 14:49:45,169 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [373766087] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:45,169 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:45,169 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:45,170 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349724204] [2024-11-19 14:49:45,170 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:45,170 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:45,170 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:45,170 INFO L85 PathProgramCache]: Analyzing trace with hash 1664429457, now seen corresponding path program 1 times [2024-11-19 14:49:45,171 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:45,171 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [494059219] [2024-11-19 14:49:45,171 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:45,171 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:45,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:45,229 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:45,229 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:45,230 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [494059219] [2024-11-19 14:49:45,230 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [494059219] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:45,230 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:45,230 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:45,230 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1466440819] [2024-11-19 14:49:45,230 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:45,231 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:45,231 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:45,231 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:45,231 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:45,231 INFO L87 Difference]: Start difference. First operand 16387 states and 30018 transitions. cyclomatic complexity: 13632 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:45,374 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:45,374 INFO L93 Difference]: Finished difference Result 16413 states and 30044 transitions. [2024-11-19 14:49:45,374 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16413 states and 30044 transitions. [2024-11-19 14:49:45,456 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13051 [2024-11-19 14:49:45,509 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16413 states to 16413 states and 30044 transitions. [2024-11-19 14:49:45,509 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16413 [2024-11-19 14:49:45,524 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16413 [2024-11-19 14:49:45,525 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16413 states and 30044 transitions. [2024-11-19 14:49:45,538 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:45,538 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16413 states and 30044 transitions. [2024-11-19 14:49:45,549 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16413 states and 30044 transitions. [2024-11-19 14:49:46,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16413 to 16407. [2024-11-19 14:49:46,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16407 states, 16407 states have (on average 1.8308039251538977) internal successors, (30038), 16406 states have internal predecessors, (30038), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:46,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16407 states to 16407 states and 30038 transitions. [2024-11-19 14:49:46,259 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16407 states and 30038 transitions. [2024-11-19 14:49:46,262 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:46,263 INFO L425 stractBuchiCegarLoop]: Abstraction has 16407 states and 30038 transitions. [2024-11-19 14:49:46,263 INFO L332 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-11-19 14:49:46,263 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16407 states and 30038 transitions. [2024-11-19 14:49:46,305 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13046 [2024-11-19 14:49:46,305 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:46,305 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:46,307 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:46,307 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:46,307 INFO L745 eck$LassoCheckResult]: Stem: 260579#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 260580#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 261731#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 261253#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 261254#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 260733#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 260734#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 262359#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 262527#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 260601#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 260602#L1463 assume 0 == initPersonOnFloor_~floor#1; 262651#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 260535#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 261403#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 260289#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 260290#L1255 assume !(0 == callOnFloor_~floorID#1); 262023#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 260844#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 261827#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 261036#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 260951#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 260952#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 260980#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 260394#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 260254#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 262712#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 262708#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 262707#L1255-2 assume !(0 == callOnFloor_~floorID#1); 262706#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 262702#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 262701#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 262700#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 262699#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 262698#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 262697#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 260985#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 260986#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 261850#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 262564#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 262714#L2908 assume !(0 != timeShift_~tmp___9~2#1); 262605#L2999 assume !(1 == ~doorState~0); 261758#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 261349#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 261350#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 262378#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 261942#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 261943#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 262336#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 262695#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 261428#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 261348#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 262129#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 260688#L2727-2 assume !(1 == ~currentHeading~0); 260500#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 260501#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 261620#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 260467#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 268957#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 268956#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 268955#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 268954#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 268946#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 268852#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 268688#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 268689#L707-2 [2024-11-19 14:49:46,308 INFO L747 eck$LassoCheckResult]: Loop: 268689#L707-2 assume !false; 268826#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 268825#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 268601#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 268600#L715 assume 1 != cleanup_~tmp___0~2#1; 268599#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 268598#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 268596#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 268597#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 268676#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 262368#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 262369#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 262853#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 262854#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 262837#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 262838#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 262833#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 262834#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 262831#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 262830#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 262829#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 262828#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 262826#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 262825#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 262823#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 262822#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 262821#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 262819#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 262820#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 262779#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 262973#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 262764#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 262971#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 262948#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 262938#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 262919#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 262917#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 262918#L2727-5 assume !(1 == ~currentHeading~0); 276258#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 262240#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 261411#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 261203#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 275980#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 268715#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 268716#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 268717#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 268834#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 268828#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 268827#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 268689#L707-2 [2024-11-19 14:49:46,308 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:46,308 INFO L85 PathProgramCache]: Analyzing trace with hash -2087150209, now seen corresponding path program 2 times [2024-11-19 14:49:46,308 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:46,309 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1012388445] [2024-11-19 14:49:46,309 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-19 14:49:46,309 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:46,344 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:49:46,344 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:46,381 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:46,381 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:46,381 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1012388445] [2024-11-19 14:49:46,381 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1012388445] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:46,381 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:46,381 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:46,381 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [163034444] [2024-11-19 14:49:46,381 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:46,382 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:46,382 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:46,382 INFO L85 PathProgramCache]: Analyzing trace with hash -329715249, now seen corresponding path program 1 times [2024-11-19 14:49:46,382 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:46,382 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2119345796] [2024-11-19 14:49:46,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:46,382 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:46,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:46,490 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:46,490 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:46,490 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2119345796] [2024-11-19 14:49:46,490 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2119345796] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:46,491 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:46,491 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:46,491 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1390254729] [2024-11-19 14:49:46,491 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:46,491 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:46,491 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:46,493 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-19 14:49:46,493 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2024-11-19 14:49:46,493 INFO L87 Difference]: Start difference. First operand 16407 states and 30038 transitions. cyclomatic complexity: 13632 Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:47,805 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:47,805 INFO L93 Difference]: Finished difference Result 24689 states and 45239 transitions. [2024-11-19 14:49:47,805 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24689 states and 45239 transitions. [2024-11-19 14:49:47,901 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21310 [2024-11-19 14:49:47,961 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24689 states to 24689 states and 45239 transitions. [2024-11-19 14:49:47,962 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24689 [2024-11-19 14:49:47,980 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24689 [2024-11-19 14:49:47,981 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24689 states and 45239 transitions. [2024-11-19 14:49:47,997 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:47,997 INFO L218 hiAutomatonCegarLoop]: Abstraction has 24689 states and 45239 transitions. [2024-11-19 14:49:48,009 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24689 states and 45239 transitions. [2024-11-19 14:49:48,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24689 to 23868. [2024-11-19 14:49:48,173 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23868 states, 23868 states have (on average 1.8379420144126026) internal successors, (43868), 23867 states have internal predecessors, (43868), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:48,211 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23868 states to 23868 states and 43868 transitions. [2024-11-19 14:49:48,211 INFO L240 hiAutomatonCegarLoop]: Abstraction has 23868 states and 43868 transitions. [2024-11-19 14:49:48,211 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-11-19 14:49:48,212 INFO L425 stractBuchiCegarLoop]: Abstraction has 23868 states and 43868 transitions. [2024-11-19 14:49:48,212 INFO L332 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-11-19 14:49:48,212 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 23868 states and 43868 transitions. [2024-11-19 14:49:48,456 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20510 [2024-11-19 14:49:48,456 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:48,456 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:48,460 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:48,460 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:48,460 INFO L745 eck$LassoCheckResult]: Stem: 301694#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 301695#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 302855#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 302370#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 302371#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 301849#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 301850#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 303539#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 303733#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 301716#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 301717#L1463 assume 0 == initPersonOnFloor_~floor#1; 303884#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 301649#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 302521#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 301404#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 301405#L1255 assume !(0 == callOnFloor_~floorID#1); 303172#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 301961#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 302953#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 302154#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 302067#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 302068#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 302097#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 301508#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 301369#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 303961#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 303957#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 303956#L1255-2 assume !(0 == callOnFloor_~floorID#1); 303955#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 303951#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 303950#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 303949#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 303948#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 303947#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 303946#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 302102#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 302103#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 302977#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 303779#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 303963#L2908 assume !(0 != timeShift_~tmp___9~2#1); 303830#L2999 assume !(1 == ~doorState~0); 302880#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 302466#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 302467#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 303558#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 303080#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 303081#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 303514#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 303944#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 302548#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 302465#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 303286#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 301805#L2727-2 assume !(1 == ~currentHeading~0); 301614#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 301615#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 302742#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 301581#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 303043#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 302437#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 302438#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 303158#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 310810#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 310811#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 310806#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 303797#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 303798#L707-2 [2024-11-19 14:49:48,462 INFO L747 eck$LassoCheckResult]: Loop: 303798#L707-2 assume !false; 311542#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 311531#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 311530#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 311516#L715 assume 1 != cleanup_~tmp___0~2#1; 311515#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 311491#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 311488#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 311487#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 310821#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 310819#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 310676#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 310243#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 310238#L1192-26 assume !(1 == isFloorCalling_~floorID#1); 310239#L1196-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 320266#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 320264#L2760-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~7#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 320256#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 320246#L2908-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 320244#L2910-2 assume !(0 != ~persons_0~0); 320233#L2910-3 assume !(0 != ~persons_1~0); 320227#L2924-1 assume !(0 != ~persons_2~0); 320218#L2938-1 assume !(0 != ~persons_3~0); 320208#L2952-1 assume !(0 != ~persons_4~0); 320169#L2966-1 assume !(0 != ~persons_5~0); 320168#L2980-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 320166#L1283-12 assume 0 == isPersonOnFloor_~floor#1; 320103#L1284-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 320090#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 320088#L2810-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 320089#L2810-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 320814#L1283-14 assume 0 == isPersonOnFloor_~floor#1; 320797#L1284-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 320778#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 320776#L2823-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 320777#L2823-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 321576#L1283-16 assume 0 == isPersonOnFloor_~floor#1; 321557#L1284-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 321530#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret81#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret81#1;havoc processWaitingOnFloor_#t~ret81#1; 321528#L2836-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 321526#L2836-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 321524#L1283-18 assume 0 == isPersonOnFloor_~floor#1; 321493#L1284-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 321492#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 321491#L2849-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 320165#L2849-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 320164#L1283-20 assume 0 == isPersonOnFloor_~floor#1; 320134#L1284-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 320126#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 320124#L2862-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 320125#L2862-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 322169#L1283-22 assume 0 == isPersonOnFloor_~floor#1; 322148#L1284-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 322133#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 322131#L2875-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 322132#L2875-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 324159#L1223-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 301613#L1235-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 302604#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 302605#L2118-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 302014#L2130-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 301979#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 301980#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 303353#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 303703#$Ultimate##5367 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 302324#$Ultimate##5376 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 301380#$Ultimate##5385 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 302188#$Ultimate##5394 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 302187#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 311543#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 303798#L707-2 [2024-11-19 14:49:48,462 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:48,462 INFO L85 PathProgramCache]: Analyzing trace with hash 2031900549, now seen corresponding path program 1 times [2024-11-19 14:49:48,462 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:48,462 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [64206115] [2024-11-19 14:49:48,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:48,462 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:48,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:48,518 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:48,519 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:48,519 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [64206115] [2024-11-19 14:49:48,520 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [64206115] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:48,520 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:48,521 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:49:48,521 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [458719760] [2024-11-19 14:49:48,521 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:48,521 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:48,521 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:48,521 INFO L85 PathProgramCache]: Analyzing trace with hash 1434347797, now seen corresponding path program 1 times [2024-11-19 14:49:48,521 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:48,522 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [677776201] [2024-11-19 14:49:48,522 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:48,522 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:48,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:48,581 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:48,582 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:48,582 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [677776201] [2024-11-19 14:49:48,582 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [677776201] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:48,582 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:48,582 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:48,582 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [511888318] [2024-11-19 14:49:48,582 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:48,583 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:48,583 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:48,583 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-19 14:49:48,583 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-19 14:49:48,584 INFO L87 Difference]: Start difference. First operand 23868 states and 43868 transitions. cyclomatic complexity: 20001 Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:48,704 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:48,704 INFO L93 Difference]: Finished difference Result 23868 states and 43862 transitions. [2024-11-19 14:49:48,704 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23868 states and 43862 transitions. [2024-11-19 14:49:48,807 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20510 [2024-11-19 14:49:48,876 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23868 states to 23868 states and 43862 transitions. [2024-11-19 14:49:48,876 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23868 [2024-11-19 14:49:48,897 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23868 [2024-11-19 14:49:48,897 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23868 states and 43862 transitions. [2024-11-19 14:49:48,915 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:48,915 INFO L218 hiAutomatonCegarLoop]: Abstraction has 23868 states and 43862 transitions. [2024-11-19 14:49:48,929 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23868 states and 43862 transitions. [2024-11-19 14:49:49,315 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23868 to 23868. [2024-11-19 14:49:49,341 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23868 states, 23868 states have (on average 1.8376906318082789) internal successors, (43862), 23867 states have internal predecessors, (43862), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:49,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23868 states to 23868 states and 43862 transitions. [2024-11-19 14:49:49,394 INFO L240 hiAutomatonCegarLoop]: Abstraction has 23868 states and 43862 transitions. [2024-11-19 14:49:49,394 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-19 14:49:49,395 INFO L425 stractBuchiCegarLoop]: Abstraction has 23868 states and 43862 transitions. [2024-11-19 14:49:49,395 INFO L332 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2024-11-19 14:49:49,395 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 23868 states and 43862 transitions. [2024-11-19 14:49:49,482 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20510 [2024-11-19 14:49:49,482 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:49,482 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:49,488 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:49,488 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:49,489 INFO L745 eck$LassoCheckResult]: Stem: 349439#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 349440#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 350620#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 350123#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 350124#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 349595#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 349596#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 351300#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 351484#L1829 assume !(0 == getOrigin_~person#1); 350170#L1833 assume !(1 == getOrigin_~person#1); 350167#L1837 assume !(2 == getOrigin_~person#1); 350168#L1841 assume !(3 == getOrigin_~person#1); 351038#L1845 assume !(4 == getOrigin_~person#1); 351396#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 349460#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 349461#L1463 assume 0 == initPersonOnFloor_~floor#1; 351632#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 349394#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 350280#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 349149#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 349150#L1255 assume !(0 == callOnFloor_~floorID#1); 350933#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 349706#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 351756#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 351755#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 351751#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 351748#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 351746#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 351718#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 351714#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 351712#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 351708#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 351707#L1255-2 assume !(0 == callOnFloor_~floorID#1); 351706#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 351702#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 351701#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 351700#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 351699#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 351698#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 351697#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 349847#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 349848#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 350742#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 351525#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 351759#L2908 assume !(0 != timeShift_~tmp___9~2#1); 351577#L2999 assume !(1 == ~doorState~0); 350647#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 350223#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 350224#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 351326#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 350842#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 350843#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 351274#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 351695#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 350306#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 350222#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 351046#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 349549#L2727-2 assume !(1 == ~currentHeading~0); 349359#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 349360#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 350505#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 349326#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 350809#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 350192#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 350193#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 349526#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 349371#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 349474#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 349370#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 351545#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 351546#L707-2 [2024-11-19 14:49:49,489 INFO L747 eck$LassoCheckResult]: Loop: 351546#L707-2 assume !false; 361359#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 361358#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 361357#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 361356#L715 assume 1 != cleanup_~tmp___0~2#1; 361355#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 361354#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 361353#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 361326#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 361325#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 361324#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 361323#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 361322#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 361321#L1192-26 assume !(1 == isFloorCalling_~floorID#1); 361318#L1196-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 361317#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 361307#L2760-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~7#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 361301#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 361299#L2908-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 361296#L2910-2 assume !(0 != ~persons_0~0); 361285#L2910-3 assume !(0 != ~persons_1~0); 361279#L2924-1 assume !(0 != ~persons_2~0); 361270#L2938-1 assume !(0 != ~persons_3~0); 361260#L2952-1 assume !(0 != ~persons_4~0); 361221#L2966-1 assume !(0 != ~persons_5~0); 361220#L2980-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 361219#L1283-12 assume 0 == isPersonOnFloor_~floor#1; 361195#L1284-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 361182#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 361180#L2810-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 361181#L2810-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 363153#L1283-14 assume 0 == isPersonOnFloor_~floor#1; 363084#L1284-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 363061#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 363058#L2823-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 363056#L2823-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 363055#L1283-16 assume 0 == isPersonOnFloor_~floor#1; 363032#L1284-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 363005#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret81#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret81#1;havoc processWaitingOnFloor_#t~ret81#1; 363003#L2836-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 363001#L2836-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 363000#L1283-18 assume 0 == isPersonOnFloor_~floor#1; 362965#L1284-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 362933#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 362930#L2849-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 362931#L2849-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 364632#L1283-20 assume 0 == isPersonOnFloor_~floor#1; 364604#L1284-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 364596#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 364594#L2862-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 364595#L2862-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 364898#L1283-22 assume 0 == isPersonOnFloor_~floor#1; 364770#L1284-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 364756#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 364748#L2875-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 364745#L2875-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 361393#L1223-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 361390#L1235-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 361388#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 361387#L2118-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 361380#L2130-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 350069#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 361377#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 361375#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 361373#$Ultimate##5367 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 361372#L994-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 361371#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret50#1;havoc __utac_acc__Specification1_spec__3_#t~ret50#1; 361368#L998-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 361361#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 361360#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 351546#L707-2 [2024-11-19 14:49:49,490 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:49,490 INFO L85 PathProgramCache]: Analyzing trace with hash -926526700, now seen corresponding path program 1 times [2024-11-19 14:49:49,490 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:49,490 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [947762957] [2024-11-19 14:49:49,490 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:49,490 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:49,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:49,637 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:49,637 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:49,637 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [947762957] [2024-11-19 14:49:49,638 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [947762957] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:49,638 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:49,638 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-19 14:49:49,638 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [510116067] [2024-11-19 14:49:49,638 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:49,639 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:49,639 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:49,639 INFO L85 PathProgramCache]: Analyzing trace with hash 944220499, now seen corresponding path program 1 times [2024-11-19 14:49:49,639 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:49,640 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [113735384] [2024-11-19 14:49:49,640 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:49,640 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:49,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:49,719 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:49,719 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:49,719 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [113735384] [2024-11-19 14:49:49,720 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [113735384] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:49,720 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:49,720 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:49,720 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [948148158] [2024-11-19 14:49:49,720 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:49,720 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:49,720 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:49,721 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:49,721 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:49,721 INFO L87 Difference]: Start difference. First operand 23868 states and 43862 transitions. cyclomatic complexity: 19995 Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:51,078 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:51,079 INFO L93 Difference]: Finished difference Result 23847 states and 43767 transitions. [2024-11-19 14:49:51,079 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23847 states and 43767 transitions. [2024-11-19 14:49:51,212 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20489 [2024-11-19 14:49:51,304 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23847 states to 23847 states and 43767 transitions. [2024-11-19 14:49:51,305 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23847 [2024-11-19 14:49:51,331 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23847 [2024-11-19 14:49:51,331 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23847 states and 43767 transitions. [2024-11-19 14:49:51,357 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:51,357 INFO L218 hiAutomatonCegarLoop]: Abstraction has 23847 states and 43767 transitions. [2024-11-19 14:49:51,374 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23847 states and 43767 transitions. [2024-11-19 14:49:51,942 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23847 to 23772. [2024-11-19 14:49:51,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23772 states, 23772 states have (on average 1.836362106680128) internal successors, (43654), 23771 states have internal predecessors, (43654), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:52,014 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23772 states to 23772 states and 43654 transitions. [2024-11-19 14:49:52,014 INFO L240 hiAutomatonCegarLoop]: Abstraction has 23772 states and 43654 transitions. [2024-11-19 14:49:52,015 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-19 14:49:52,015 INFO L425 stractBuchiCegarLoop]: Abstraction has 23772 states and 43654 transitions. [2024-11-19 14:49:52,015 INFO L332 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2024-11-19 14:49:52,015 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 23772 states and 43654 transitions. [2024-11-19 14:49:52,097 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20414 [2024-11-19 14:49:52,097 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:52,097 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:52,103 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:52,103 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:52,103 INFO L745 eck$LassoCheckResult]: Stem: 397172#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 397173#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 398331#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 397852#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 397853#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 397326#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 397327#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 398998#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 399184#L1829 assume !(0 == getOrigin_~person#1); 397894#L1833 assume !(1 == getOrigin_~person#1); 397890#L1837 assume !(2 == getOrigin_~person#1); 397891#L1841 assume !(3 == getOrigin_~person#1); 398746#L1845 assume !(4 == getOrigin_~person#1); 399091#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 397194#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 397195#L1463 assume 0 == initPersonOnFloor_~floor#1; 399333#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 397128#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 398001#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 396880#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 396881#L1255 assume !(0 == callOnFloor_~floorID#1); 398640#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 397439#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 399120#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 399451#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 399447#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 399444#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 399443#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 399412#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 399408#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 399406#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 399402#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 399401#L1255-2 assume !(0 == callOnFloor_~floorID#1); 399400#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 399396#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 399395#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 399394#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 399393#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 399392#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 399391#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 397582#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 397583#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 398453#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 399225#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 399452#L2908 assume !(0 != timeShift_~tmp___9~2#1); 399274#L2999 assume !(1 == ~doorState~0); 398356#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 397947#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 397948#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 399018#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 398549#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 398550#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 398971#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 399389#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 398024#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 397946#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 398755#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 397281#L2727-2 assume !(1 == ~currentHeading~0); 397093#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 397094#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 398219#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 397060#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 398816#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 397917#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 397918#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 398627#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 398688#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 398689#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 419427#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 399241#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 398782#L707-2 [2024-11-19 14:49:52,104 INFO L747 eck$LassoCheckResult]: Loop: 398782#L707-2 assume !false; 398783#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 397202#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 397203#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 398316#L715 assume 1 != cleanup_~tmp___0~2#1; 398317#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 417505#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 417498#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 417497#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 407825#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 407824#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 407823#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 407604#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 399784#L1192-26 assume !(1 == isFloorCalling_~floorID#1); 397650#L1196-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 397651#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 416471#L2760-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~7#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 397159#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 418286#L2908-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 403337#L2910-2 assume !(0 != ~persons_0~0); 418274#L2910-3 assume !(0 != ~persons_1~0); 418268#L2924-1 assume !(0 != ~persons_2~0); 418259#L2938-1 assume !(0 != ~persons_3~0); 418249#L2952-1 assume !(0 != ~persons_4~0); 418203#L2966-1 assume !(0 != ~persons_5~0); 418202#L2980-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 418201#L1283-12 assume !(0 == isPersonOnFloor_~floor#1); 418199#L1316-12 assume 1 == isPersonOnFloor_~floor#1; 418198#L1317-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 418173#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 418171#L2810-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 418172#L2810-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 418815#L1283-14 assume 0 == isPersonOnFloor_~floor#1; 418746#L1284-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 418723#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 418720#L2823-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 418718#L2823-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 418717#L1283-16 assume 0 == isPersonOnFloor_~floor#1; 418694#L1284-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 418667#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret81#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret81#1;havoc processWaitingOnFloor_#t~ret81#1; 418665#L2836-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 418663#L2836-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 418662#L1283-18 assume 0 == isPersonOnFloor_~floor#1; 417907#L1284-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 417905#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 417902#L2849-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 417869#L2849-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 417867#L1283-20 assume 0 == isPersonOnFloor_~floor#1; 417828#L1284-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 417819#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 417817#L2862-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 417815#L2862-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 417814#L1283-22 assume 0 == isPersonOnFloor_~floor#1; 417618#L1284-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 417562#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 417557#L2875-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 417553#L2875-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 417551#L1223-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 397092#L1235-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 398082#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 398083#L2118-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 397491#L2130-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 397456#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 397457#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 398820#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 399153#$Ultimate##5367 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 397806#L994-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 397421#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret50#1;havoc __utac_acc__Specification1_spec__3_#t~ret50#1; 397422#L998-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 397666#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 398929#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 398782#L707-2 [2024-11-19 14:49:52,105 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:52,105 INFO L85 PathProgramCache]: Analyzing trace with hash -926526700, now seen corresponding path program 2 times [2024-11-19 14:49:52,105 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:52,105 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2111834107] [2024-11-19 14:49:52,105 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-19 14:49:52,105 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:52,127 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:49:52,131 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:52,292 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:52,292 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:52,292 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2111834107] [2024-11-19 14:49:52,292 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2111834107] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:52,293 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:52,293 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-19 14:49:52,293 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1990051528] [2024-11-19 14:49:52,293 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:52,297 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:52,298 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:52,298 INFO L85 PathProgramCache]: Analyzing trace with hash -247919997, now seen corresponding path program 1 times [2024-11-19 14:49:52,298 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:52,298 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1664349563] [2024-11-19 14:49:52,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:52,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:52,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:52,435 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:52,435 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:52,436 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1664349563] [2024-11-19 14:49:52,436 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1664349563] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:52,436 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:52,436 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:52,436 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1599905711] [2024-11-19 14:49:52,436 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:52,436 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:52,436 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:52,437 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-19 14:49:52,437 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-19 14:49:52,437 INFO L87 Difference]: Start difference. First operand 23772 states and 43654 transitions. cyclomatic complexity: 19883 Second operand has 6 states, 6 states have (on average 11.666666666666666) internal successors, (70), 6 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:52,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:52,699 INFO L93 Difference]: Finished difference Result 23772 states and 43647 transitions. [2024-11-19 14:49:52,700 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23772 states and 43647 transitions. [2024-11-19 14:49:52,810 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20414 [2024-11-19 14:49:52,880 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23772 states to 23772 states and 43647 transitions. [2024-11-19 14:49:52,881 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23772 [2024-11-19 14:49:52,900 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23772 [2024-11-19 14:49:52,900 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23772 states and 43647 transitions. [2024-11-19 14:49:52,921 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:52,921 INFO L218 hiAutomatonCegarLoop]: Abstraction has 23772 states and 43647 transitions. [2024-11-19 14:49:52,933 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23772 states and 43647 transitions. [2024-11-19 14:49:53,463 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23772 to 23770. [2024-11-19 14:49:53,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23770 states, 23770 states have (on average 1.8361379890618426) internal successors, (43645), 23769 states have internal predecessors, (43645), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:53,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23770 states to 23770 states and 43645 transitions. [2024-11-19 14:49:53,574 INFO L240 hiAutomatonCegarLoop]: Abstraction has 23770 states and 43645 transitions. [2024-11-19 14:49:53,574 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-19 14:49:53,574 INFO L425 stractBuchiCegarLoop]: Abstraction has 23770 states and 43645 transitions. [2024-11-19 14:49:53,575 INFO L332 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2024-11-19 14:49:53,575 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 23770 states and 43645 transitions. [2024-11-19 14:49:53,648 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20414 [2024-11-19 14:49:53,648 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:53,648 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:53,653 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:53,653 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:53,654 INFO L745 eck$LassoCheckResult]: Stem: 444724#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 444725#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 445878#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 445401#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 445402#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 444878#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 444879#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 446561#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 446750#L1829 assume !(0 == getOrigin_~person#1); 445441#L1833 assume !(1 == getOrigin_~person#1); 445437#L1837 assume !(2 == getOrigin_~person#1); 445438#L1841 assume !(3 == getOrigin_~person#1); 446299#L1845 assume !(4 == getOrigin_~person#1); 446652#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 444745#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 444746#L1463 assume !(0 == initPersonOnFloor_~floor#1); 446638#L1490 assume 1 == initPersonOnFloor_~floor#1; 446423#L1491 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 444680#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 445550#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 444436#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 444437#L1255 assume !(0 == callOnFloor_~floorID#1); 446194#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 444990#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 447031#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 447030#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 447029#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 447022#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 447028#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 447018#L1490-1 assume 1 == initPersonOnFloor_~floor#1; 447007#L1491-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 446984#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 446982#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 446978#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 446977#L1255-2 assume !(0 == callOnFloor_~floorID#1); 446976#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 446972#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 446971#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 446970#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 446969#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 446968#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 446967#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 445129#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 445130#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 446002#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 446782#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 446985#L2908 assume !(0 != timeShift_~tmp___9~2#1); 446828#L2999 assume !(1 == ~doorState~0); 445905#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 445494#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 445495#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 446581#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 446104#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 446105#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 446536#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 446965#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 445574#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 445493#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 446307#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 444834#L2727-2 assume !(1 == ~currentHeading~0); 444645#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 444646#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 445766#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 444612#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 446070#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 445465#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 445466#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 444811#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 444657#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 444759#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 444656#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 446736#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 446799#L707-2 [2024-11-19 14:49:53,654 INFO L747 eck$LassoCheckResult]: Loop: 446799#L707-2 assume !false; 453813#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 453806#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 453804#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 453802#L715 assume 1 != cleanup_~tmp___0~2#1; 453801#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 453800#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 453799#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 453797#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 453798#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 457902#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 457901#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 457900#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 457898#L1192-26 assume !(1 == isFloorCalling_~floorID#1); 457895#L1196-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 457894#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 457885#L2760-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~7#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 457879#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 457877#L2908-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 457874#L2910-2 assume !(0 != ~persons_0~0); 457863#L2910-3 assume !(0 != ~persons_1~0); 457857#L2924-1 assume !(0 != ~persons_2~0); 457848#L2938-1 assume !(0 != ~persons_3~0); 457838#L2952-1 assume !(0 != ~persons_4~0); 457799#L2966-1 assume !(0 != ~persons_5~0); 457798#L2980-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~8#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 457797#L1283-12 assume !(0 == isPersonOnFloor_~floor#1); 457795#L1316-12 assume 1 == isPersonOnFloor_~floor#1; 457724#L1317-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_1~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 457698#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~8#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 457696#L2810-3 assume !(0 != processWaitingOnFloor_~tmp___0~8#1); 457694#L2810-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 457693#L1283-14 assume 0 == isPersonOnFloor_~floor#1; 457624#L1284-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 457601#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 457598#L2823-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 457596#L2823-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 457595#L1283-16 assume 0 == isPersonOnFloor_~floor#1; 457572#L1284-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 457545#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret81#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret81#1;havoc processWaitingOnFloor_#t~ret81#1; 457543#L2836-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 457541#L2836-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 457540#L1283-18 assume 0 == isPersonOnFloor_~floor#1; 457505#L1284-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 457504#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret83#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret83#1;havoc processWaitingOnFloor_#t~ret83#1; 457502#L2849-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 457503#L2849-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 458842#L1283-20 assume 0 == isPersonOnFloor_~floor#1; 458814#L1284-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 458806#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret85#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret85#1;havoc processWaitingOnFloor_#t~ret85#1; 458804#L2862-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 458805#L2862-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 460440#L1283-22 assume 0 == isPersonOnFloor_~floor#1; 460419#L1284-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 460406#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret87#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret87#1;havoc processWaitingOnFloor_#t~ret87#1; 460404#L2875-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 460405#L2875-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 457144#L1223-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 457140#L1235-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 457139#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~8#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 457138#L2118-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 457128#L2130-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 445348#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 457125#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 457123#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 457121#$Ultimate##5367 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 453862#$Ultimate##5376 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 453855#$Ultimate##5385 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 453852#$Ultimate##5394 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 453817#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 453815#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 446799#L707-2 [2024-11-19 14:49:53,655 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:53,655 INFO L85 PathProgramCache]: Analyzing trace with hash 370367262, now seen corresponding path program 1 times [2024-11-19 14:49:53,655 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:53,655 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [660442526] [2024-11-19 14:49:53,655 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:53,655 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:53,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:53,761 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:53,762 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:53,762 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [660442526] [2024-11-19 14:49:53,762 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [660442526] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:53,762 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:53,762 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:53,762 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [858541108] [2024-11-19 14:49:53,762 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:53,766 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:53,767 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:53,767 INFO L85 PathProgramCache]: Analyzing trace with hash 242207301, now seen corresponding path program 1 times [2024-11-19 14:49:53,767 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:53,767 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [877204152] [2024-11-19 14:49:53,767 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:53,767 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:53,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:53,855 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:53,856 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:53,856 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [877204152] [2024-11-19 14:49:53,856 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [877204152] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:53,856 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:53,856 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:53,856 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [985711855] [2024-11-19 14:49:53,856 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:53,856 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:53,856 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:53,856 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:49:53,856 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:49:53,857 INFO L87 Difference]: Start difference. First operand 23770 states and 43645 transitions. cyclomatic complexity: 19876 Second operand has 5 states, 5 states have (on average 14.2) internal successors, (71), 5 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:55,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:55,417 INFO L93 Difference]: Finished difference Result 31708 states and 58048 transitions. [2024-11-19 14:49:55,418 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31708 states and 58048 transitions. [2024-11-19 14:49:55,544 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 28364 [2024-11-19 14:49:55,640 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31708 states to 31708 states and 58048 transitions. [2024-11-19 14:49:55,640 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31708 [2024-11-19 14:49:55,667 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31708 [2024-11-19 14:49:55,668 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31708 states and 58048 transitions. [2024-11-19 14:49:55,689 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:55,689 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31708 states and 58048 transitions. [2024-11-19 14:49:55,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31708 states and 58048 transitions. [2024-11-19 14:49:56,173 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31708 to 31112. [2024-11-19 14:49:56,203 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31112 states, 31112 states have (on average 1.8372332219079455) internal successors, (57160), 31111 states have internal predecessors, (57160), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:56,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31112 states to 31112 states and 57160 transitions. [2024-11-19 14:49:56,257 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31112 states and 57160 transitions. [2024-11-19 14:49:56,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-19 14:49:56,258 INFO L425 stractBuchiCegarLoop]: Abstraction has 31112 states and 57160 transitions. [2024-11-19 14:49:56,259 INFO L332 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2024-11-19 14:49:56,259 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31112 states and 57160 transitions. [2024-11-19 14:49:56,348 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:49:56,348 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:56,348 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:56,352 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:56,352 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:56,352 INFO L745 eck$LassoCheckResult]: Stem: 500217#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 500218#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 501384#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 500900#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 500901#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 500373#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 500374#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 502052#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 502230#L1829 assume !(0 == getOrigin_~person#1); 500943#L1833 assume !(1 == getOrigin_~person#1); 500939#L1837 assume !(2 == getOrigin_~person#1); 500940#L1841 assume !(3 == getOrigin_~person#1); 501795#L1845 assume !(4 == getOrigin_~person#1); 502137#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 500239#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 500240#L1463 assume !(0 == initPersonOnFloor_~floor#1); 502125#L1490 assume 1 == initPersonOnFloor_~floor#1; 501917#L1491 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 500172#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 501050#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 499928#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 499929#L1255 assume !(0 == callOnFloor_~floorID#1); 501689#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 500486#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 502486#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 502485#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 502482#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 502478#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 502475#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 502472#L1490-1 assume 1 == initPersonOnFloor_~floor#1; 502461#L1491-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 502439#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 502437#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 502433#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 502432#L1255-2 assume !(0 == callOnFloor_~floorID#1); 502431#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 502427#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 502426#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 502425#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 502424#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 502423#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 502422#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 500628#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 500629#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 501504#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 502267#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 502477#L2908 assume !(0 != timeShift_~tmp___9~2#1); 502313#L2999 assume !(1 == ~doorState~0); 501411#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 500998#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 500999#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 502072#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 501602#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 501603#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 502026#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 502420#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 501076#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 500997#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 501803#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 500328#L2727-2 assume !(1 == ~currentHeading~0); 500137#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 500138#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 501272#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 500104#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 501570#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 500967#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 500968#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 500305#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 500149#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 500253#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 500148#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 502219#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 502284#L707-2 [2024-11-19 14:49:56,352 INFO L747 eck$LassoCheckResult]: Loop: 502284#L707-2 assume !false; 516195#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 516196#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 516191#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 516192#L715 assume 1 != cleanup_~tmp___0~2#1; 516186#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 516187#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 516178#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 516179#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 516171#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 516173#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 509871#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 509868#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 516161#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 516158#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 516153#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 516154#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 516142#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 516143#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 517199#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 522518#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 522517#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 522516#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 522512#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 522510#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 522504#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 522502#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 508624#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 508622#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 508619#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 508617#L2520-2 assume !(0 == ~currentFloorID~0); 508615#L2526-2 assume ~currentFloorID~0 > 0; 508613#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 508607#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 508592#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 508584#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 508571#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 508565#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 508564#L2727-3 assume !(1 == ~currentHeading~0); 508562#L2737-9 assume !(0 == ~currentFloorID~0); 505175#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 504662#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 504661#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 504660#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 504658#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 504659#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 502940#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 502941#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 502909#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 502910#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 502874#L707-2 assume !false; 502875#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 502870#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 502871#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 502866#L715 assume 1 != cleanup_~tmp___0~2#1; 502867#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 502862#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 502863#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 502857#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 502858#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 509765#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 502839#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 502826#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 502827#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 502810#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 502811#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 502806#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 502807#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 502804#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 502803#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 502802#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 502801#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 502799#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 502798#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 502796#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 502795#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 502794#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 502792#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 502793#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 502790#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 508771#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 508769#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 508767#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 508768#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 509570#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 508757#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 509557#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 509555#L2727-5 assume !(1 == ~currentHeading~0); 509553#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 509551#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 501059#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 500850#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 516236#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 516237#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 516230#$Ultimate##5367 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 516227#L994-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 516228#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret50#1;havoc __utac_acc__Specification1_spec__3_#t~ret50#1; 516216#L998-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 516210#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 516206#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 502284#L707-2 [2024-11-19 14:49:56,353 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:56,353 INFO L85 PathProgramCache]: Analyzing trace with hash 370367262, now seen corresponding path program 2 times [2024-11-19 14:49:56,353 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:56,353 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [222550063] [2024-11-19 14:49:56,353 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-19 14:49:56,354 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:56,371 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:49:56,371 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:56,423 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:56,423 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:56,423 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [222550063] [2024-11-19 14:49:56,423 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [222550063] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:56,424 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:56,424 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:56,424 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [637088573] [2024-11-19 14:49:56,424 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:56,424 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:56,424 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:56,424 INFO L85 PathProgramCache]: Analyzing trace with hash 2071601050, now seen corresponding path program 1 times [2024-11-19 14:49:56,425 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:56,425 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [804613978] [2024-11-19 14:49:56,425 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:56,425 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:56,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:56,524 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:49:56,524 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:56,525 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [804613978] [2024-11-19 14:49:56,525 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [804613978] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:56,525 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:56,525 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:56,525 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [366871999] [2024-11-19 14:49:56,525 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:56,526 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:56,526 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:56,526 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:56,526 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:56,526 INFO L87 Difference]: Start difference. First operand 31112 states and 57160 transitions. cyclomatic complexity: 26049 Second operand has 4 states, 4 states have (on average 18.0) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:56,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:56,793 INFO L93 Difference]: Finished difference Result 31156 states and 57220 transitions. [2024-11-19 14:49:56,793 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31156 states and 57220 transitions. [2024-11-19 14:49:56,913 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:49:57,349 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31156 states to 31156 states and 57220 transitions. [2024-11-19 14:49:57,349 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31156 [2024-11-19 14:49:57,419 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31156 [2024-11-19 14:49:57,419 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31156 states and 57220 transitions. [2024-11-19 14:49:57,452 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:57,452 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31156 states and 57220 transitions. [2024-11-19 14:49:57,471 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31156 states and 57220 transitions. [2024-11-19 14:49:57,748 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31156 to 31112. [2024-11-19 14:49:57,775 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31112 states, 31112 states have (on average 1.836783234764721) internal successors, (57146), 31111 states have internal predecessors, (57146), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:57,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31112 states to 31112 states and 57146 transitions. [2024-11-19 14:49:57,836 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31112 states and 57146 transitions. [2024-11-19 14:49:57,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:57,837 INFO L425 stractBuchiCegarLoop]: Abstraction has 31112 states and 57146 transitions. [2024-11-19 14:49:57,837 INFO L332 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2024-11-19 14:49:57,837 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31112 states and 57146 transitions. [2024-11-19 14:49:57,939 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:49:57,939 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:57,939 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:57,944 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:57,944 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:57,945 INFO L745 eck$LassoCheckResult]: Stem: 562497#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 562498#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 563655#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 563175#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 563176#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 562650#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 562651#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 564330#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 564510#L1829 assume !(0 == getOrigin_~person#1); 563217#L1833 assume !(1 == getOrigin_~person#1); 563213#L1837 assume !(2 == getOrigin_~person#1); 563214#L1841 assume !(3 == getOrigin_~person#1); 564065#L1845 assume !(4 == getOrigin_~person#1); 564418#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 562518#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 562519#L1463 assume !(0 == initPersonOnFloor_~floor#1); 564406#L1490 assume 1 == initPersonOnFloor_~floor#1; 564192#L1491 assume !(0 == initPersonOnFloor_~person#1); 564193#L1494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 562451#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 563323#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 562208#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 562209#L1255 assume !(0 == callOnFloor_~floorID#1); 563960#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 562761#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 563755#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 562954#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 562866#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 562867#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 564758#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 564756#L1490-1 assume 1 == initPersonOnFloor_~floor#1; 564255#L1491-2 assume !(0 == initPersonOnFloor_~person#1); 564256#L1494-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 564720#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 564718#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 564714#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 564713#L1255-2 assume !(0 == callOnFloor_~floorID#1); 564712#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 564708#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 564705#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 564704#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 564703#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 564702#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 564701#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 562902#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 562903#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 563781#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 564552#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 564706#L2908 assume !(0 != timeShift_~tmp___9~2#1); 564593#L2999 assume !(1 == ~doorState~0); 563681#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 563269#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 563270#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 564352#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 563878#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 563879#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 564304#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 564699#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 563350#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 563268#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 564073#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 562606#L2727-2 assume !(1 == ~currentHeading~0); 562416#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 562417#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 563544#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 562383#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 563846#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 563240#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 563241#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 562583#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 562428#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 562532#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 562427#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 564497#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 564566#L707-2 [2024-11-19 14:49:57,945 INFO L747 eck$LassoCheckResult]: Loop: 564566#L707-2 assume !false; 579369#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 579370#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 579365#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 579366#L715 assume 1 != cleanup_~tmp___0~2#1; 579319#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 579320#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 579283#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 579284#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 572158#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 572160#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 584331#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 584327#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 584305#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 584289#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 584287#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 584285#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 584283#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 584279#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 584278#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 584277#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 584276#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 584275#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 584271#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 584269#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 584263#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 584261#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 567485#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 567483#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 567479#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 567477#L2520-2 assume !(0 == ~currentFloorID~0); 567475#L2526-2 assume ~currentFloorID~0 > 0; 567473#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 567471#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 567469#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 567434#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 567420#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 567418#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 567415#L2727-3 assume !(1 == ~currentHeading~0); 567414#L2737-9 assume !(0 == ~currentFloorID~0); 567412#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 567092#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 567090#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 567089#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 567086#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 567087#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 567088#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 565169#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 565164#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 565126#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 565127#L707-2 assume !false; 565121#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 565122#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 565117#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 565118#L715 assume 1 != cleanup_~tmp___0~2#1; 565113#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 565114#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 565109#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 565110#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 572069#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 565100#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 565101#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 565074#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 565075#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 565058#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 565059#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 565054#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 565055#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 565052#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 565051#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 565050#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 565049#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 565047#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 565046#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 565044#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 565043#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 565042#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 565040#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 565041#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 565038#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 571733#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 571731#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 571732#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 571982#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 562508#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 562495#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 571839#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 571840#L2727-5 assume !(1 == ~currentHeading~0); 571918#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 571917#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 563332#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 563124#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 579404#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 579405#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 579401#$Ultimate##5367 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 579384#$Ultimate##5376 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 579380#$Ultimate##5385 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 579376#$Ultimate##5394 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 579377#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 579373#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 564566#L707-2 [2024-11-19 14:49:57,946 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:57,946 INFO L85 PathProgramCache]: Analyzing trace with hash -172503346, now seen corresponding path program 1 times [2024-11-19 14:49:57,946 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:57,946 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1615558227] [2024-11-19 14:49:57,947 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:57,947 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:57,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:58,015 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:58,016 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:58,016 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1615558227] [2024-11-19 14:49:58,016 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1615558227] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:58,016 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:58,016 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:58,016 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1360686898] [2024-11-19 14:49:58,016 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:58,016 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:58,016 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:58,017 INFO L85 PathProgramCache]: Analyzing trace with hash -1733238948, now seen corresponding path program 1 times [2024-11-19 14:49:58,017 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:58,017 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1459470720] [2024-11-19 14:49:58,017 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:58,017 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:58,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:58,099 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:49:58,100 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:58,100 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1459470720] [2024-11-19 14:49:58,100 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1459470720] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:58,100 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:58,100 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:49:58,100 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1873983089] [2024-11-19 14:49:58,100 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:58,101 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:58,101 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:58,101 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:58,101 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:58,102 INFO L87 Difference]: Start difference. First operand 31112 states and 57146 transitions. cyclomatic complexity: 26035 Second operand has 4 states, 4 states have (on average 18.5) internal successors, (74), 4 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:58,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:58,373 INFO L93 Difference]: Finished difference Result 31156 states and 57206 transitions. [2024-11-19 14:49:58,373 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31156 states and 57206 transitions. [2024-11-19 14:49:58,528 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:49:58,624 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31156 states to 31156 states and 57206 transitions. [2024-11-19 14:49:58,624 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31156 [2024-11-19 14:49:58,652 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31156 [2024-11-19 14:49:58,652 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31156 states and 57206 transitions. [2024-11-19 14:49:58,676 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:49:58,676 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31156 states and 57206 transitions. [2024-11-19 14:49:58,694 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31156 states and 57206 transitions. [2024-11-19 14:49:59,230 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31156 to 31112. [2024-11-19 14:49:59,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31112 states, 31112 states have (on average 1.8363332476214966) internal successors, (57132), 31111 states have internal predecessors, (57132), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:59,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31112 states to 31112 states and 57132 transitions. [2024-11-19 14:49:59,309 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31112 states and 57132 transitions. [2024-11-19 14:49:59,310 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:49:59,310 INFO L425 stractBuchiCegarLoop]: Abstraction has 31112 states and 57132 transitions. [2024-11-19 14:49:59,310 INFO L332 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2024-11-19 14:49:59,310 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31112 states and 57132 transitions. [2024-11-19 14:49:59,407 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:49:59,407 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:49:59,407 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:49:59,411 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:59,411 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:49:59,412 INFO L745 eck$LassoCheckResult]: Stem: 624777#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 624778#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 625952#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 625460#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 625461#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 624931#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 624932#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 626637#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 626824#L1829 assume !(0 == getOrigin_~person#1); 625504#L1833 assume !(1 == getOrigin_~person#1); 625500#L1837 assume !(2 == getOrigin_~person#1); 625501#L1841 assume !(3 == getOrigin_~person#1); 626367#L1845 assume !(4 == getOrigin_~person#1); 626729#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 624798#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 624799#L1463 assume !(0 == initPersonOnFloor_~floor#1); 626716#L1490 assume 1 == initPersonOnFloor_~floor#1; 626490#L1491 assume !(0 == initPersonOnFloor_~person#1); 626491#L1494 assume !(1 == initPersonOnFloor_~person#1); 626528#L1497 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 624732#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 625609#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 624488#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 624489#L1255 assume !(0 == callOnFloor_~floorID#1); 626263#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 625043#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 626052#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 625241#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 625152#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 625153#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 627099#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 627096#L1490-1 assume 1 == initPersonOnFloor_~floor#1; 627097#L1491-2 assume !(0 == initPersonOnFloor_~person#1); 626172#L1494-2 assume !(1 == initPersonOnFloor_~person#1); 626173#L1497-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 627071#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 627069#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 627065#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 627064#L1255-2 assume !(0 == callOnFloor_~floorID#1); 627063#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 627059#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 627057#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 627056#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 627055#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 627054#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 627053#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 625188#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 625189#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 626076#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 626862#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 627058#L2908 assume !(0 != timeShift_~tmp___9~2#1); 626915#L2999 assume !(1 == ~doorState~0); 625978#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 625556#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 625557#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 626659#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 626177#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 626178#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 626607#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 627051#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 625638#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 625555#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 626377#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 624886#L2727-2 assume !(1 == ~currentHeading~0); 624697#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 624698#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 625837#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 624664#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 626141#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 625527#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 625528#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 624864#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 624709#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 624812#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 624708#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 626882#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 626883#L707-2 [2024-11-19 14:49:59,412 INFO L747 eck$LassoCheckResult]: Loop: 626883#L707-2 assume !false; 634376#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 634375#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 634374#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 634373#L715 assume 1 != cleanup_~tmp___0~2#1; 634372#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 634371#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 634370#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 634368#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 634366#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 634365#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 634360#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 634355#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 634303#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 634298#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 634296#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 634294#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 634293#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 634286#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 634270#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 634268#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 634265#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 634262#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 633463#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 633461#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 633378#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 627418#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 627420#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 629526#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 629522#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 629520#L2520-2 assume !(0 == ~currentFloorID~0); 629518#L2526-2 assume ~currentFloorID~0 > 0; 629516#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 629514#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 629512#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 629493#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 629399#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 629383#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 629376#L2727-3 assume !(1 == ~currentHeading~0); 629366#L2737-9 assume !(0 == ~currentFloorID~0); 629355#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 629350#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 629351#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 629151#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 629152#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 634524#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 634525#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 634523#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 634517#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 634516#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 634515#L707-2 assume !false; 634514#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 634513#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 634512#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 634511#L715 assume 1 != cleanup_~tmp___0~2#1; 634510#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 634509#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 634508#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 634507#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 634505#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 634504#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 634503#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 634499#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 634484#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 627467#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 627468#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 627463#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 627464#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 627461#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 627460#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 627459#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 627458#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 627456#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 627455#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 627453#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 627452#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 627451#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 627450#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 625469#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 625470#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 633481#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 633479#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 633475#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 633476#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 624788#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 624775#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 634202#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 625263#L2727-5 assume !(1 == ~currentHeading~0); 625265#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 626495#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 625618#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 625410#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 634479#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 634478#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 634477#$Ultimate##5367 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 634475#L994-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 634476#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret50#1;havoc __utac_acc__Specification1_spec__3_#t~ret50#1; 634436#L998-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 634429#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 634377#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 626883#L707-2 [2024-11-19 14:49:59,413 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:59,413 INFO L85 PathProgramCache]: Analyzing trace with hash 1632370622, now seen corresponding path program 1 times [2024-11-19 14:49:59,413 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:59,413 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1237156190] [2024-11-19 14:49:59,413 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:49:59,413 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:59,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:49:59,474 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:49:59,474 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:59,474 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1237156190] [2024-11-19 14:49:59,474 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1237156190] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:59,474 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:59,474 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:49:59,474 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [715683788] [2024-11-19 14:49:59,475 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:59,475 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:49:59,475 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:49:59,475 INFO L85 PathProgramCache]: Analyzing trace with hash 2071601050, now seen corresponding path program 2 times [2024-11-19 14:49:59,475 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:49:59,475 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1305724188] [2024-11-19 14:49:59,476 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-19 14:49:59,476 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:49:59,492 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:49:59,492 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:49:59,519 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-11-19 14:49:59,519 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:49:59,520 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1305724188] [2024-11-19 14:49:59,520 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1305724188] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:49:59,520 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:49:59,520 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:49:59,520 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1151015948] [2024-11-19 14:49:59,520 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:49:59,520 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:49:59,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:49:59,521 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:49:59,521 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:49:59,521 INFO L87 Difference]: Start difference. First operand 31112 states and 57132 transitions. cyclomatic complexity: 26021 Second operand has 4 states, 4 states have (on average 19.0) internal successors, (76), 4 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:49:59,749 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:49:59,749 INFO L93 Difference]: Finished difference Result 31128 states and 57154 transitions. [2024-11-19 14:49:59,749 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31128 states and 57154 transitions. [2024-11-19 14:49:59,889 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:49:59,977 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31128 states to 31128 states and 57154 transitions. [2024-11-19 14:49:59,977 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31128 [2024-11-19 14:50:00,005 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31128 [2024-11-19 14:50:00,005 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31128 states and 57154 transitions. [2024-11-19 14:50:00,027 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:00,028 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31128 states and 57154 transitions. [2024-11-19 14:50:00,047 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31128 states and 57154 transitions. [2024-11-19 14:50:00,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31128 to 31112. [2024-11-19 14:50:00,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31112 states, 31112 states have (on average 1.8362046798662894) internal successors, (57128), 31111 states have internal predecessors, (57128), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:00,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31112 states to 31112 states and 57128 transitions. [2024-11-19 14:50:00,647 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31112 states and 57128 transitions. [2024-11-19 14:50:00,648 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:50:00,648 INFO L425 stractBuchiCegarLoop]: Abstraction has 31112 states and 57128 transitions. [2024-11-19 14:50:00,648 INFO L332 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2024-11-19 14:50:00,648 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31112 states and 57128 transitions. [2024-11-19 14:50:00,734 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:00,734 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:00,734 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:00,738 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:00,738 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:00,739 INFO L745 eck$LassoCheckResult]: Stem: 687027#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 687028#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 688184#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 687703#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 687704#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 687182#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 687183#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 688850#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 689033#L1829 assume !(0 == getOrigin_~person#1); 687744#L1833 assume !(1 == getOrigin_~person#1); 687740#L1837 assume !(2 == getOrigin_~person#1); 687741#L1841 assume !(3 == getOrigin_~person#1); 688588#L1845 assume !(4 == getOrigin_~person#1); 688943#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 687049#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 687050#L1463 assume !(0 == initPersonOnFloor_~floor#1); 688930#L1490 assume !(1 == initPersonOnFloor_~floor#1); 687972#L1517 assume !(2 == initPersonOnFloor_~floor#1); 687680#L1544 assume !(3 == initPersonOnFloor_~floor#1); 687682#L1571 assume !(4 == initPersonOnFloor_~floor#1); 687073#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 687849#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 686738#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 686739#L1255 assume !(0 == callOnFloor_~floorID#1); 688484#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 687295#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 689291#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 689290#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 689285#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 689283#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 689278#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 689275#L1490-1 assume 1 == initPersonOnFloor_~floor#1; 689273#L1491-2 assume !(0 == initPersonOnFloor_~person#1); 689268#L1494-2 assume !(1 == initPersonOnFloor_~person#1); 689260#L1497-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 689243#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 689241#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 689237#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 689236#L1255-2 assume !(0 == callOnFloor_~floorID#1); 689235#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 689231#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 689230#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 689229#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 689228#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 689227#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 689226#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 687434#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 687435#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 688303#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 689069#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 689288#L2908 assume !(0 != timeShift_~tmp___9~2#1); 689113#L2999 assume !(1 == ~doorState~0); 688209#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 687797#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 687798#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 688874#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 688400#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 688401#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 688822#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 689224#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 687875#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 687796#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 688596#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 687138#L2727-2 assume !(1 == ~currentHeading~0); 686948#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 686949#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 688068#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 686915#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 695656#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 687768#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 687769#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 687115#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 686960#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 687063#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 686959#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 689018#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 689087#L707-2 [2024-11-19 14:50:00,739 INFO L747 eck$LassoCheckResult]: Loop: 689087#L707-2 assume !false; 697109#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 697110#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 697102#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 697103#L715 assume 1 != cleanup_~tmp___0~2#1; 697098#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 697099#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 696683#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 696684#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 696657#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 696659#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 696643#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 696640#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 696620#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 696616#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 696611#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 696612#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 702044#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 702045#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 704025#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 712768#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 712767#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 712766#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 712762#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 712760#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 712754#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 712752#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 691712#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 691711#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 691709#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 691708#L2520-2 assume !(0 == ~currentFloorID~0); 691707#L2526-2 assume ~currentFloorID~0 > 0; 691706#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 689354#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 689348#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 689349#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 691634#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 691626#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 691617#L2727-3 assume !(1 == ~currentHeading~0); 691610#L2737-9 assume !(0 == ~currentFloorID~0); 691600#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 691595#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 691596#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 696571#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 696568#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 696569#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 696570#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 689659#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 689654#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 689615#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 689616#L707-2 assume !false; 689611#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 689612#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 689607#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 689608#L715 assume 1 != cleanup_~tmp___0~2#1; 689603#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 689604#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 689599#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 689600#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 689594#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 689590#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 689579#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 689566#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 689567#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 689549#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 689550#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 689540#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 689541#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 689535#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 689534#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 689533#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 689532#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 689530#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 689529#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 689527#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 687415#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 687416#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 686950#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 686951#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 687418#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 696254#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 696249#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 696245#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 696240#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 696236#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 686854#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 688131#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 687508#L2727-5 assume !(1 == ~currentHeading~0); 687510#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 688718#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 687857#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 687654#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 703949#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 703950#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 703946#$Ultimate##5367 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 697162#$Ultimate##5376 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 697155#$Ultimate##5385 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 697151#$Ultimate##5394 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 697152#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 697117#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 689087#L707-2 [2024-11-19 14:50:00,740 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:00,740 INFO L85 PathProgramCache]: Analyzing trace with hash 1799126078, now seen corresponding path program 1 times [2024-11-19 14:50:00,740 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:00,740 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2115048082] [2024-11-19 14:50:00,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:00,740 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:00,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:00,784 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:00,785 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:00,785 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2115048082] [2024-11-19 14:50:00,785 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2115048082] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:00,785 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:00,785 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:50:00,785 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2080204942] [2024-11-19 14:50:00,785 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:00,785 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:00,786 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:00,786 INFO L85 PathProgramCache]: Analyzing trace with hash -1733238948, now seen corresponding path program 2 times [2024-11-19 14:50:00,786 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:00,786 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1506828134] [2024-11-19 14:50:00,786 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-19 14:50:00,786 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:00,799 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:50:00,799 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:50:00,856 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-19 14:50:00,856 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:00,856 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1506828134] [2024-11-19 14:50:00,856 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1506828134] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:00,856 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:00,856 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:50:00,856 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1324689124] [2024-11-19 14:50:00,856 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:00,857 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:00,857 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:00,857 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:50:00,857 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:50:00,857 INFO L87 Difference]: Start difference. First operand 31112 states and 57128 transitions. cyclomatic complexity: 26017 Second operand has 4 states, 4 states have (on average 19.0) internal successors, (76), 4 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:00,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:00,983 INFO L93 Difference]: Finished difference Result 31099 states and 57102 transitions. [2024-11-19 14:50:00,983 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31099 states and 57102 transitions. [2024-11-19 14:50:01,085 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:01,156 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31099 states to 31099 states and 57102 transitions. [2024-11-19 14:50:01,157 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31099 [2024-11-19 14:50:01,180 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31099 [2024-11-19 14:50:01,180 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31099 states and 57102 transitions. [2024-11-19 14:50:01,199 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:01,199 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31099 states and 57102 transitions. [2024-11-19 14:50:01,215 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31099 states and 57102 transitions. [2024-11-19 14:50:01,838 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31099 to 31097. [2024-11-19 14:50:01,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31097 states, 31097 states have (on average 1.8361899861722997) internal successors, (57100), 31096 states have internal predecessors, (57100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:01,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31097 states to 31097 states and 57100 transitions. [2024-11-19 14:50:01,910 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31097 states and 57100 transitions. [2024-11-19 14:50:01,910 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:50:01,910 INFO L425 stractBuchiCegarLoop]: Abstraction has 31097 states and 57100 transitions. [2024-11-19 14:50:01,910 INFO L332 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2024-11-19 14:50:01,911 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31097 states and 57100 transitions. [2024-11-19 14:50:01,987 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:01,987 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:01,987 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:01,990 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:01,991 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:01,991 INFO L745 eck$LassoCheckResult]: Stem: 749247#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 749248#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 750399#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 749922#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 749923#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 749402#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 749403#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 751058#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 751244#L1829 assume !(0 == getOrigin_~person#1); 749966#L1833 assume !(1 == getOrigin_~person#1); 749960#L1837 assume !(2 == getOrigin_~person#1); 749961#L1841 assume !(3 == getOrigin_~person#1); 750803#L1845 assume !(4 == getOrigin_~person#1); 751144#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 749269#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 749270#L1463 assume !(0 == initPersonOnFloor_~floor#1); 751131#L1490 assume 1 == initPersonOnFloor_~floor#1; 750926#L1491 assume !(0 == initPersonOnFloor_~person#1); 750927#L1494 assume !(1 == initPersonOnFloor_~person#1); 750961#L1497 assume !(2 == initPersonOnFloor_~person#1); 749293#L1500 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 749294#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 750075#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 748961#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 748962#L1255 assume !(0 == callOnFloor_~floorID#1); 750699#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 749512#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 751507#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 751506#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 751503#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 751502#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 751498#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 751496#L1490-1 assume 1 == initPersonOnFloor_~floor#1; 751497#L1491-2 assume !(0 == initPersonOnFloor_~person#1); 751494#L1494-2 assume !(1 == initPersonOnFloor_~person#1); 751482#L1497-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 751464#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 751462#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 751458#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 751457#L1255-2 assume !(0 == callOnFloor_~floorID#1); 751456#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 751452#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 751451#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 751450#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 751449#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 751448#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 751447#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 749654#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 749655#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 750517#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 751283#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 751465#L2908 assume !(0 != timeShift_~tmp___9~2#1); 751339#L2999 assume !(1 == ~doorState~0); 750424#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 750018#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 750019#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 751077#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 750613#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 750614#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 751031#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 751445#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 750097#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 750017#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 750811#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 749359#L2727-2 assume !(1 == ~currentHeading~0); 749170#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 749171#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 750289#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 749137#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 750580#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 749988#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 749989#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 749337#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 749182#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 749283#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 749181#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 751302#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 751303#L707-2 [2024-11-19 14:50:01,991 INFO L747 eck$LassoCheckResult]: Loop: 751303#L707-2 assume !false; 758907#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 758906#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 758905#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 758904#L715 assume 1 != cleanup_~tmp___0~2#1; 758903#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 758902#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 758901#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 758899#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 758900#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 758947#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 766250#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 766247#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 766227#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 766223#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 766218#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 766219#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 766214#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 766215#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 772145#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 772142#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 772143#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 772151#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 772146#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 772144#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 772141#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 772114#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 752019#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 752020#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 751598#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 751599#L2520-2 assume !(0 == ~currentFloorID~0); 754618#L2526-2 assume ~currentFloorID~0 > 0; 754617#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 754612#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 751325#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 751326#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 752049#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 752050#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 754370#L2727-3 assume !(1 == ~currentHeading~0); 754363#L2737-9 assume !(0 == ~currentFloorID~0); 754353#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 754348#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 754349#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 756945#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 756942#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 756943#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 756944#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 756908#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 756901#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 756898#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 756896#L707-2 assume !false; 756894#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 756892#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 756890#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 756888#L715 assume 1 != cleanup_~tmp___0~2#1; 756886#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 756884#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 756882#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 756879#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 756877#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 752322#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 752323#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 752302#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 752303#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 752279#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 752280#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 752270#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 752271#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 752240#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 752239#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 752238#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 752237#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 752235#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 752234#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 752232#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 749635#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 749636#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 749172#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 749173#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 749930#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 749488#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 749489#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 750006#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 752229#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 749258#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 749259#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 752174#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 752175#L2727-5 assume !(1 == ~currentHeading~0); 752230#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 750957#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 750080#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 749872#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 758927#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 758926#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 758925#$Ultimate##5367 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 758924#L994-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 758922#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret50#1;havoc __utac_acc__Specification1_spec__3_#t~ret50#1; 758916#L998-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 758909#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 758908#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 751303#L707-2 [2024-11-19 14:50:01,992 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:01,992 INFO L85 PathProgramCache]: Analyzing trace with hash -841287106, now seen corresponding path program 1 times [2024-11-19 14:50:01,992 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:01,992 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [170667699] [2024-11-19 14:50:01,992 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:01,992 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:02,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:02,095 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:02,096 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:02,096 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [170667699] [2024-11-19 14:50:02,096 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [170667699] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:02,096 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:02,096 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:50:02,096 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [282120588] [2024-11-19 14:50:02,096 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:02,097 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:02,098 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:02,098 INFO L85 PathProgramCache]: Analyzing trace with hash 2071601050, now seen corresponding path program 3 times [2024-11-19 14:50:02,098 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:02,098 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [680591705] [2024-11-19 14:50:02,098 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-11-19 14:50:02,098 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:02,117 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2024-11-19 14:50:02,117 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:50:02,155 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-11-19 14:50:02,155 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:02,155 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [680591705] [2024-11-19 14:50:02,156 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [680591705] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:02,156 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:02,156 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:50:02,156 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [659039335] [2024-11-19 14:50:02,156 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:02,156 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:02,156 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:02,157 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:50:02,157 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:50:02,157 INFO L87 Difference]: Start difference. First operand 31097 states and 57100 transitions. cyclomatic complexity: 26004 Second operand has 4 states, 4 states have (on average 19.25) internal successors, (77), 4 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:02,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:02,414 INFO L93 Difference]: Finished difference Result 31125 states and 57137 transitions. [2024-11-19 14:50:02,415 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31125 states and 57137 transitions. [2024-11-19 14:50:02,538 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:02,626 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31125 states to 31125 states and 57137 transitions. [2024-11-19 14:50:02,626 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31125 [2024-11-19 14:50:02,651 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31125 [2024-11-19 14:50:02,651 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31125 states and 57137 transitions. [2024-11-19 14:50:02,672 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:02,673 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31125 states and 57137 transitions. [2024-11-19 14:50:02,691 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31125 states and 57137 transitions. [2024-11-19 14:50:03,273 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31125 to 31097. [2024-11-19 14:50:03,314 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31097 states, 31097 states have (on average 1.835836254301058) internal successors, (57089), 31096 states have internal predecessors, (57089), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:03,375 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31097 states to 31097 states and 57089 transitions. [2024-11-19 14:50:03,376 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31097 states and 57089 transitions. [2024-11-19 14:50:03,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:50:03,376 INFO L425 stractBuchiCegarLoop]: Abstraction has 31097 states and 57089 transitions. [2024-11-19 14:50:03,376 INFO L332 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2024-11-19 14:50:03,376 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31097 states and 57089 transitions. [2024-11-19 14:50:03,473 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:03,474 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:03,474 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:03,478 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:03,482 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:03,483 INFO L745 eck$LassoCheckResult]: Stem: 811479#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 811480#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 812628#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 812147#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 812148#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 811628#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 811629#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 813314#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 813507#L1829 assume !(0 == getOrigin_~person#1); 812192#L1833 assume !(1 == getOrigin_~person#1); 812188#L1837 assume !(2 == getOrigin_~person#1); 812189#L1841 assume !(3 == getOrigin_~person#1); 813047#L1845 assume !(4 == getOrigin_~person#1); 813409#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 811500#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 811501#L1463 assume !(0 == initPersonOnFloor_~floor#1); 813394#L1490 assume 1 == initPersonOnFloor_~floor#1; 813176#L1491 assume !(0 == initPersonOnFloor_~person#1); 813177#L1494 assume !(1 == initPersonOnFloor_~person#1); 813213#L1497 assume !(2 == initPersonOnFloor_~person#1); 811523#L1500 assume !(3 == initPersonOnFloor_~person#1); 811524#L1503 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 811814#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 812303#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 811192#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 811193#L1255 assume !(0 == callOnFloor_~floorID#1); 812945#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 811738#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 812729#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 811932#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 811844#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 811845#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 813742#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 813741#L1490-1 assume 1 == initPersonOnFloor_~floor#1; 813238#L1491-2 assume !(0 == initPersonOnFloor_~person#1); 813239#L1494-2 assume !(1 == initPersonOnFloor_~person#1); 813664#L1497-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 811674#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 813738#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 813734#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 813733#L1255-2 assume !(0 == callOnFloor_~floorID#1); 813732#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 813728#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 813725#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 813724#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 813723#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 813722#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 813721#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 811879#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 811880#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 812753#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 813547#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 813726#L2908 assume !(0 != timeShift_~tmp___9~2#1); 813595#L2999 assume !(1 == ~doorState~0); 812654#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 812246#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 812247#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 813338#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 812855#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 812856#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 813287#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 813719#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 812326#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 812245#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 813057#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 811587#L2727-2 assume !(1 == ~currentHeading~0); 811402#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 811403#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 812517#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 811369#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 812820#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 812216#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 812217#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 811565#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 811414#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 811514#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 811413#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 813495#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 813563#L707-2 [2024-11-19 14:50:03,484 INFO L747 eck$LassoCheckResult]: Loop: 813563#L707-2 assume !false; 828451#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 828450#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 828449#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 828448#L715 assume 1 != cleanup_~tmp___0~2#1; 828447#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 828446#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 828445#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 828443#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 828441#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 828440#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 828439#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 828435#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 821077#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 821073#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 821068#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 821069#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 824622#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 824623#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 828423#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 833558#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 833557#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 833556#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 833552#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 833550#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 833544#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 833542#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 816948#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 816945#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 816934#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 816935#L2520-2 assume !(0 == ~currentFloorID~0); 816946#L2526-2 assume ~currentFloorID~0 > 0; 816941#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 816940#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 816930#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 816907#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 816889#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 816890#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 818188#L2727-3 assume !(1 == ~currentHeading~0); 818161#L2737-9 assume !(0 == ~currentFloorID~0); 816050#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 816010#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 816009#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 816008#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 816005#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 816006#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 816007#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 814403#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 814394#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 814362#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 814361#L707-2 assume !false; 814360#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 814359#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 814358#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 814357#L715 assume 1 != cleanup_~tmp___0~2#1; 814356#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 814355#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 814354#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 814352#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 814349#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 814348#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 814337#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 814324#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 814325#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 814308#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 814309#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 814269#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 814270#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 814266#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 814265#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 814264#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 814263#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 814261#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 814258#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 814254#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 814251#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 814242#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 814240#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 812156#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 812157#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 814260#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 814257#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 814253#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 814250#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 811492#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 811305#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 812581#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 812582#L2727-5 assume !(1 == ~currentHeading~0); 820845#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 820841#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 812309#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 812096#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 828463#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 828462#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 828461#$Ultimate##5367 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 828460#L994-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 828459#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret50#1;havoc __utac_acc__Specification1_spec__3_#t~ret50#1; 828457#L998-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 828453#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 828452#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 813563#L707-2 [2024-11-19 14:50:03,484 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:03,485 INFO L85 PathProgramCache]: Analyzing trace with hash -1357939517, now seen corresponding path program 1 times [2024-11-19 14:50:03,485 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:03,485 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1746613479] [2024-11-19 14:50:03,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:03,485 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:03,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:03,557 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:03,558 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:03,558 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1746613479] [2024-11-19 14:50:03,558 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1746613479] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:03,558 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:03,558 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:50:03,558 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1181435553] [2024-11-19 14:50:03,558 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:03,559 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:03,559 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:03,559 INFO L85 PathProgramCache]: Analyzing trace with hash 2071601050, now seen corresponding path program 4 times [2024-11-19 14:50:03,559 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:03,559 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [464911959] [2024-11-19 14:50:03,559 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-11-19 14:50:03,559 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:03,575 INFO L227 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-11-19 14:50:03,576 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:50:03,635 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:50:03,635 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:03,635 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [464911959] [2024-11-19 14:50:03,635 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [464911959] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:03,635 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:03,635 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:50:03,636 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [99658375] [2024-11-19 14:50:03,636 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:03,636 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:03,636 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:03,637 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:50:03,637 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:50:03,637 INFO L87 Difference]: Start difference. First operand 31097 states and 57089 transitions. cyclomatic complexity: 25993 Second operand has 4 states, 4 states have (on average 19.5) internal successors, (78), 4 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:03,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:03,839 INFO L93 Difference]: Finished difference Result 31125 states and 57126 transitions. [2024-11-19 14:50:03,839 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31125 states and 57126 transitions. [2024-11-19 14:50:03,981 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:04,074 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31125 states to 31125 states and 57126 transitions. [2024-11-19 14:50:04,074 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31125 [2024-11-19 14:50:04,103 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31125 [2024-11-19 14:50:04,103 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31125 states and 57126 transitions. [2024-11-19 14:50:04,128 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:04,128 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31125 states and 57126 transitions. [2024-11-19 14:50:04,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31125 states and 57126 transitions. [2024-11-19 14:50:04,403 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31125 to 31097. [2024-11-19 14:50:04,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31097 states, 31097 states have (on average 1.8354825224298164) internal successors, (57078), 31096 states have internal predecessors, (57078), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:04,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31097 states to 31097 states and 57078 transitions. [2024-11-19 14:50:04,493 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31097 states and 57078 transitions. [2024-11-19 14:50:04,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:50:04,494 INFO L425 stractBuchiCegarLoop]: Abstraction has 31097 states and 57078 transitions. [2024-11-19 14:50:04,494 INFO L332 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2024-11-19 14:50:04,494 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31097 states and 57078 transitions. [2024-11-19 14:50:04,835 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:04,836 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:04,836 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:04,840 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:04,841 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:04,841 INFO L745 eck$LassoCheckResult]: Stem: 873715#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 873716#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 874863#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 874384#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 874385#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 873867#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 873868#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 875546#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 875738#L1829 assume !(0 == getOrigin_~person#1); 874424#L1833 assume !(1 == getOrigin_~person#1); 874420#L1837 assume !(2 == getOrigin_~person#1); 874421#L1841 assume !(3 == getOrigin_~person#1); 875284#L1845 assume !(4 == getOrigin_~person#1); 875642#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 873736#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 873737#L1463 assume !(0 == initPersonOnFloor_~floor#1); 875629#L1490 assume 1 == initPersonOnFloor_~floor#1; 875406#L1491 assume !(0 == initPersonOnFloor_~person#1); 875407#L1494 assume !(1 == initPersonOnFloor_~person#1); 875440#L1497 assume !(2 == initPersonOnFloor_~person#1); 873759#L1500 assume !(3 == initPersonOnFloor_~person#1); 873760#L1503 assume !(4 == initPersonOnFloor_~person#1); 874055#L1506 assume !(5 == initPersonOnFloor_~person#1); 874056#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 874532#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 873426#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 873427#L1255 assume !(0 == callOnFloor_~floorID#1); 875183#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 873979#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 874963#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 874171#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 874086#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 874087#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 875964#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 875963#L1490-1 assume 1 == initPersonOnFloor_~floor#1; 875467#L1491-2 assume !(0 == initPersonOnFloor_~person#1); 875468#L1494-2 assume !(1 == initPersonOnFloor_~person#1); 875892#L1497-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 873913#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 875960#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 875956#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 875955#L1255-2 assume !(0 == callOnFloor_~floorID#1); 875954#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 875950#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 875948#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 875947#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 875946#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 875945#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 875944#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 874120#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 874121#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 874987#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 875778#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 875949#L2908 assume !(0 != timeShift_~tmp___9~2#1); 875828#L2999 assume !(1 == ~doorState~0); 874889#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 874476#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 874477#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 875568#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 875089#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 875090#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 875517#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 875942#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 874554#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 874475#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 875293#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 873824#L2727-2 assume !(1 == ~currentHeading~0); 873637#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 873638#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 874749#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 873604#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 875056#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 874447#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 874448#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 873802#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 873649#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 873750#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 873648#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 875797#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 875798#L707-2 [2024-11-19 14:50:04,841 INFO L747 eck$LassoCheckResult]: Loop: 875798#L707-2 assume !false; 883382#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 883378#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 883379#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 883374#L715 assume 1 != cleanup_~tmp___0~2#1; 883375#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 883370#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 883371#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 883327#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 883328#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 897890#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 897889#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 897885#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 897863#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 897847#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 897845#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 897843#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 897841#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 897837#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 897836#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 897835#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 897834#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 897833#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 897829#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 897827#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 897821#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 897819#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 874102#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 874103#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 873639#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 873640#L2520-2 assume !(0 == ~currentFloorID~0); 874392#L2526-2 assume ~currentFloorID~0 > 0; 875426#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 873734#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 873735#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 875134#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 875136#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 882178#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 882175#L2727-3 assume !(1 == ~currentHeading~0); 882173#L2737-9 assume !(0 == ~currentFloorID~0); 882169#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 878082#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 878083#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 883252#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 883249#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 883250#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 883251#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 876420#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 876415#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 876379#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 876380#L707-2 assume !false; 876375#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 876376#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 876371#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 876372#L715 assume 1 != cleanup_~tmp___0~2#1; 876367#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 876368#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 876363#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 876364#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 876357#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 876359#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 876344#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 876332#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 876333#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 876316#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 876317#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 876312#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 876313#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 876309#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 876307#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 876300#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 876299#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 876297#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 876296#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 876294#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 876293#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 876292#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 876270#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 876256#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 876244#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 876243#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 876242#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 876241#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 876237#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 873729#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 873713#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 875145#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 874194#L2727-5 assume !(1 == ~currentHeading~0); 874196#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 875411#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 874537#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 874334#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 886953#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 886949#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 886950#$Ultimate##5367 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 890700#$Ultimate##5376 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 886943#$Ultimate##5385 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 886942#$Ultimate##5394 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 883385#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 883386#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 875798#L707-2 [2024-11-19 14:50:04,842 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:04,842 INFO L85 PathProgramCache]: Analyzing trace with hash -76051995, now seen corresponding path program 1 times [2024-11-19 14:50:04,842 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:04,842 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [877551792] [2024-11-19 14:50:04,842 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:04,842 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:04,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:04,919 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:04,919 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:04,919 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [877551792] [2024-11-19 14:50:04,919 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [877551792] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:04,922 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:04,923 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:50:04,923 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1736265952] [2024-11-19 14:50:04,923 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:04,923 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:04,923 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:04,923 INFO L85 PathProgramCache]: Analyzing trace with hash -1733238948, now seen corresponding path program 3 times [2024-11-19 14:50:04,923 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:04,923 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [49176195] [2024-11-19 14:50:04,924 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-11-19 14:50:04,924 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:04,953 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2024-11-19 14:50:04,953 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:50:05,069 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-19 14:50:05,069 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:05,069 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [49176195] [2024-11-19 14:50:05,069 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [49176195] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:05,069 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:05,069 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:50:05,069 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [781476288] [2024-11-19 14:50:05,069 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:05,069 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:05,070 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:05,070 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-19 14:50:05,070 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-19 14:50:05,070 INFO L87 Difference]: Start difference. First operand 31097 states and 57078 transitions. cyclomatic complexity: 25982 Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:05,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:05,327 INFO L93 Difference]: Finished difference Result 31097 states and 57077 transitions. [2024-11-19 14:50:05,327 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31097 states and 57077 transitions. [2024-11-19 14:50:05,599 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:05,705 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31097 states to 31097 states and 57077 transitions. [2024-11-19 14:50:05,705 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31097 [2024-11-19 14:50:05,735 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31097 [2024-11-19 14:50:05,735 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31097 states and 57077 transitions. [2024-11-19 14:50:05,762 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:05,762 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31097 states and 57077 transitions. [2024-11-19 14:50:05,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31097 states and 57077 transitions. [2024-11-19 14:50:05,969 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31097 to 31097. [2024-11-19 14:50:05,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31097 states, 31097 states have (on average 1.8354503649869762) internal successors, (57077), 31096 states have internal predecessors, (57077), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:06,042 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31097 states to 31097 states and 57077 transitions. [2024-11-19 14:50:06,043 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31097 states and 57077 transitions. [2024-11-19 14:50:06,043 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-19 14:50:06,043 INFO L425 stractBuchiCegarLoop]: Abstraction has 31097 states and 57077 transitions. [2024-11-19 14:50:06,043 INFO L332 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2024-11-19 14:50:06,043 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31097 states and 57077 transitions. [2024-11-19 14:50:06,117 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:06,117 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:06,117 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:06,120 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:06,120 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:06,120 INFO L745 eck$LassoCheckResult]: Stem: 935917#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 935918#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 937056#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 936584#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 936585#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 936068#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 936069#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 937721#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 937903#L1829 assume !(0 == getOrigin_~person#1); 936627#L1833 assume !(1 == getOrigin_~person#1); 936623#L1837 assume !(2 == getOrigin_~person#1); 936624#L1841 assume !(3 == getOrigin_~person#1); 937461#L1845 assume !(4 == getOrigin_~person#1); 937809#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 935939#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 935940#L1463 assume !(0 == initPersonOnFloor_~floor#1); 937796#L1490 assume 1 == initPersonOnFloor_~floor#1; 937586#L1491 assume !(0 == initPersonOnFloor_~person#1); 937587#L1494 assume !(1 == initPersonOnFloor_~person#1); 937624#L1497 assume !(2 == initPersonOnFloor_~person#1); 935962#L1500 assume !(3 == initPersonOnFloor_~person#1); 935963#L1503 assume !(4 == initPersonOnFloor_~person#1); 936252#L1506 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 936253#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 936736#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 935631#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 935632#L1255 assume !(0 == callOnFloor_~floorID#1); 937362#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 936177#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 938176#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 938175#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 938174#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 938172#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 938167#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 938168#L1490-1 assume 1 == initPersonOnFloor_~floor#1; 938161#L1491-2 assume !(0 == initPersonOnFloor_~person#1); 937271#L1494-2 assume !(1 == initPersonOnFloor_~person#1); 937272#L1497-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 935684#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 935685#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 938122#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 938121#L1255-2 assume !(0 == callOnFloor_~floorID#1); 938120#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 938116#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 938115#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 938114#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 938113#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 938112#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 938111#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 936318#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 936319#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 937178#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 937947#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 938165#L2908 assume !(0 != timeShift_~tmp___9~2#1); 937996#L2999 assume !(1 == ~doorState~0); 937082#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 936680#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 936681#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 937742#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 937276#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 937277#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 937696#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 938109#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 936758#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 936679#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 937471#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 936027#L2727-2 assume !(1 == ~currentHeading~0); 935840#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 935841#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 936944#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 935807#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 937244#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 936650#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 936651#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 936005#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 935852#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 935953#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 935851#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 937891#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 937965#L707-2 [2024-11-19 14:50:06,121 INFO L747 eck$LassoCheckResult]: Loop: 937965#L707-2 assume !false; 950662#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 946234#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 946230#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 946228#L715 assume 1 != cleanup_~tmp___0~2#1; 946227#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 946215#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 945563#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 945549#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 945550#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 945539#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 945534#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 945521#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 945522#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 965074#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 945505#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 945504#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 945476#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 945477#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 965046#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 965043#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 965044#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 965050#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 965045#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 965042#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 965040#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 965039#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 941296#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 941295#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 941293#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 941292#L2520-2 assume !(0 == ~currentFloorID~0); 941291#L2526-2 assume ~currentFloorID~0 > 0; 941289#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 941290#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 941299#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 941288#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 938711#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 938924#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 938925#L2727-3 assume !(1 == ~currentHeading~0); 944828#L2737-9 assume !(0 == ~currentFloorID~0); 944819#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 944815#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 944816#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 945461#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 945458#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 945459#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 945460#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 941098#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 941093#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 939104#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 939105#L707-2 assume !false; 939054#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 939055#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 939046#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 939047#L715 assume 1 != cleanup_~tmp___0~2#1; 939038#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 939039#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 939030#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 939031#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 945440#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 945469#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 939008#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 938995#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 938996#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 938952#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 938953#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 938948#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 938949#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 938946#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 938945#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 938944#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 938943#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 938940#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 938942#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 939738#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 936299#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 936300#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 935842#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 935843#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 936593#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 938436#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 938434#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 938433#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 938431#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 935931#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 935932#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 938842#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 938843#L2727-5 assume !(1 == ~currentHeading~0); 938922#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 937621#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 936742#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 936534#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 951228#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 951226#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 951224#$Ultimate##5367 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 951223#L994-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 951222#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret50#1;havoc __utac_acc__Specification1_spec__3_#t~ret50#1; 951219#L998-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 951212#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 951211#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 937965#L707-2 [2024-11-19 14:50:06,121 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:06,121 INFO L85 PathProgramCache]: Analyzing trace with hash -1336969245, now seen corresponding path program 1 times [2024-11-19 14:50:06,121 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:06,121 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [173147925] [2024-11-19 14:50:06,121 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:06,122 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:06,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:06,378 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:06,379 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:06,379 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [173147925] [2024-11-19 14:50:06,379 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [173147925] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:06,379 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:06,379 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:50:06,379 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1665904368] [2024-11-19 14:50:06,379 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:06,379 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:06,379 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:06,380 INFO L85 PathProgramCache]: Analyzing trace with hash 2071601050, now seen corresponding path program 5 times [2024-11-19 14:50:06,380 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:06,380 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1694422011] [2024-11-19 14:50:06,380 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-11-19 14:50:06,380 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:06,394 INFO L227 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:50:06,394 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:50:06,425 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:50:06,426 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:06,426 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1694422011] [2024-11-19 14:50:06,426 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1694422011] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:06,426 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:06,426 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:50:06,426 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1670470490] [2024-11-19 14:50:06,426 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:06,426 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:06,426 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:06,427 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-19 14:50:06,427 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-19 14:50:06,427 INFO L87 Difference]: Start difference. First operand 31097 states and 57077 transitions. cyclomatic complexity: 25981 Second operand has 7 states, 7 states have (on average 11.285714285714286) internal successors, (79), 7 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:06,616 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:06,616 INFO L93 Difference]: Finished difference Result 31101 states and 57080 transitions. [2024-11-19 14:50:06,616 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31101 states and 57080 transitions. [2024-11-19 14:50:06,722 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:06,793 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31101 states to 31101 states and 57080 transitions. [2024-11-19 14:50:06,794 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31101 [2024-11-19 14:50:06,814 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31101 [2024-11-19 14:50:06,814 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31101 states and 57080 transitions. [2024-11-19 14:50:06,834 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:06,834 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31101 states and 57080 transitions. [2024-11-19 14:50:06,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31101 states and 57080 transitions. [2024-11-19 14:50:07,025 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31101 to 31101. [2024-11-19 14:50:07,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31101 states, 31101 states have (on average 1.835310761711842) internal successors, (57080), 31100 states have internal predecessors, (57080), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:07,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31101 states to 31101 states and 57080 transitions. [2024-11-19 14:50:07,102 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31101 states and 57080 transitions. [2024-11-19 14:50:07,102 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-19 14:50:07,102 INFO L425 stractBuchiCegarLoop]: Abstraction has 31101 states and 57080 transitions. [2024-11-19 14:50:07,102 INFO L332 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2024-11-19 14:50:07,102 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31101 states and 57080 transitions. [2024-11-19 14:50:07,184 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:07,184 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:07,185 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:07,188 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:07,188 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:07,188 INFO L745 eck$LassoCheckResult]: Stem: 998131#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 998132#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 999277#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 998800#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 998801#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 998282#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 998283#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 999941#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1000118#L1829 assume !(0 == getOrigin_~person#1); 998841#L1833 assume !(1 == getOrigin_~person#1); 998837#L1837 assume !(2 == getOrigin_~person#1); 998838#L1841 assume !(3 == getOrigin_~person#1); 999685#L1845 assume !(4 == getOrigin_~person#1); 1000029#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 998153#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 998154#L1463 assume !(0 == initPersonOnFloor_~floor#1); 1000017#L1490 assume 1 == initPersonOnFloor_~floor#1; 999808#L1491 assume !(0 == initPersonOnFloor_~person#1); 999809#L1494 assume !(1 == initPersonOnFloor_~person#1); 999844#L1497 assume !(2 == initPersonOnFloor_~person#1); 998176#L1500 assume !(3 == initPersonOnFloor_~person#1); 998177#L1503 assume !(4 == initPersonOnFloor_~person#1); 998470#L1506 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 998471#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 998948#L940 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1000058#L943 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 997844#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 997845#L1255 assume !(0 == callOnFloor_~floorID#1); 999582#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 998394#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1000385#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1000384#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1000382#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1000380#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1000378#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 1000368#L1490-1 assume 1 == initPersonOnFloor_~floor#1; 1000369#L1491-2 assume !(0 == initPersonOnFloor_~person#1); 1000362#L1494-2 assume !(1 == initPersonOnFloor_~person#1); 1000348#L1497-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1000339#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1000334#L940-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1000332#L943-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1000327#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1000326#L1255-2 assume !(0 == callOnFloor_~floorID#1); 1000325#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1000321#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1000320#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1000319#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1000318#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1000317#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1000316#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 998536#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 998537#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 999402#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1000159#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1000386#L2908 assume !(0 != timeShift_~tmp___9~2#1); 1000209#L2999 assume !(1 == ~doorState~0); 999303#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 998893#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 998894#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 999960#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 999498#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 999499#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 999916#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1000314#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 998970#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 998892#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 999694#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 998240#L2727-2 assume !(1 == ~currentHeading~0); 998054#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 998055#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 999162#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 998021#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 999465#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 998864#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 998865#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 998218#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 998066#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 998167#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 998065#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1000177#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1000178#L707-2 [2024-11-19 14:50:07,189 INFO L747 eck$LassoCheckResult]: Loop: 1000178#L707-2 assume !false; 1007833#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1007832#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1007831#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1007830#L715 assume 1 != cleanup_~tmp___0~2#1; 1007829#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1007828#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1007827#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1007826#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1007820#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1007818#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1007813#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1007804#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1007780#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1007769#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1007768#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1007767#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1007766#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 1007762#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1007760#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1021717#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1021716#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1021715#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1021711#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1021709#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1021703#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1021701#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1003343#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1003342#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1003341#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1000705#L2520-2 assume !(0 == ~currentFloorID~0); 1000706#L2526-2 assume ~currentFloorID~0 > 0; 1000124#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 998151#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 998152#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 1000702#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1000738#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1000739#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1003024#L2727-3 assume !(1 == ~currentHeading~0); 1003017#L2737-9 assume !(0 == ~currentFloorID~0); 1003007#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1003002#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1003003#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1005848#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1005845#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1005846#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1005847#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1005811#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1005804#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1005801#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1005799#L707-2 assume !false; 1005797#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1005795#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1005793#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1005791#L715 assume 1 != cleanup_~tmp___0~2#1; 1005789#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1005787#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1005785#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1005782#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1005780#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1000981#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1000982#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1000956#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1000957#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1000940#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1000941#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1000936#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1000937#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1000933#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1000932#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1000931#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1000930#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1000928#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1000927#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1000921#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 998517#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 998518#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 998056#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 998057#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 998520#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 998372#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 998373#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 998885#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1000897#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 998145#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 998146#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1000842#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1000843#L2727-5 assume !(1 == ~currentHeading~0); 1000917#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1000918#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 998954#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 998752#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1007853#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1007852#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1007851#$Ultimate##5367 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1007850#L994-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1007848#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret50#1;havoc __utac_acc__Specification1_spec__3_#t~ret50#1; 1007842#L998-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 1007835#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1007834#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1000178#L707-2 [2024-11-19 14:50:07,189 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:07,189 INFO L85 PathProgramCache]: Analyzing trace with hash 1763791275, now seen corresponding path program 1 times [2024-11-19 14:50:07,193 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:07,193 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [421164947] [2024-11-19 14:50:07,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:07,193 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:07,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:07,249 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:07,249 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:07,249 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [421164947] [2024-11-19 14:50:07,249 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [421164947] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:07,249 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:07,249 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:50:07,249 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2140369366] [2024-11-19 14:50:07,249 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:07,250 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:07,250 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:07,250 INFO L85 PathProgramCache]: Analyzing trace with hash 2071601050, now seen corresponding path program 6 times [2024-11-19 14:50:07,250 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:07,250 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1097338834] [2024-11-19 14:50:07,250 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-11-19 14:50:07,250 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:07,263 INFO L227 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 1 check-sat command(s) [2024-11-19 14:50:07,263 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:50:07,287 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-11-19 14:50:07,287 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:07,287 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1097338834] [2024-11-19 14:50:07,287 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1097338834] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:07,287 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:07,288 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:50:07,288 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [974885124] [2024-11-19 14:50:07,290 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:07,290 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:07,290 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:07,290 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-19 14:50:07,290 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-19 14:50:07,291 INFO L87 Difference]: Start difference. First operand 31101 states and 57080 transitions. cyclomatic complexity: 25980 Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:07,526 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:07,526 INFO L93 Difference]: Finished difference Result 31069 states and 57028 transitions. [2024-11-19 14:50:07,526 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31069 states and 57028 transitions. [2024-11-19 14:50:07,666 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:07,766 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31069 states to 31069 states and 57028 transitions. [2024-11-19 14:50:07,768 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31069 [2024-11-19 14:50:07,794 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31069 [2024-11-19 14:50:07,795 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31069 states and 57028 transitions. [2024-11-19 14:50:07,818 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:07,818 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31069 states and 57028 transitions. [2024-11-19 14:50:07,837 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31069 states and 57028 transitions. [2024-11-19 14:50:08,043 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31069 to 31069. [2024-11-19 14:50:08,068 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31069 states, 31069 states have (on average 1.8355273745534133) internal successors, (57028), 31068 states have internal predecessors, (57028), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:08,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31069 states to 31069 states and 57028 transitions. [2024-11-19 14:50:08,114 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31069 states and 57028 transitions. [2024-11-19 14:50:08,115 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-19 14:50:08,115 INFO L425 stractBuchiCegarLoop]: Abstraction has 31069 states and 57028 transitions. [2024-11-19 14:50:08,115 INFO L332 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2024-11-19 14:50:08,115 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31069 states and 57028 transitions. [2024-11-19 14:50:08,195 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:08,195 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:08,195 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:08,199 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:08,199 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:08,199 INFO L745 eck$LassoCheckResult]: Stem: 1060308#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1060309#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1061451#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1060978#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1060979#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1060459#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1060460#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1062110#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1062292#L1829 assume !(0 == getOrigin_~person#1); 1061023#L1833 assume !(1 == getOrigin_~person#1); 1061019#L1837 assume !(2 == getOrigin_~person#1); 1061020#L1841 assume !(3 == getOrigin_~person#1); 1061853#L1845 assume !(4 == getOrigin_~person#1); 1062203#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1060330#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1060331#L1463 assume !(0 == initPersonOnFloor_~floor#1); 1062191#L1490 assume 1 == initPersonOnFloor_~floor#1; 1061973#L1491 assume !(0 == initPersonOnFloor_~person#1); 1061974#L1494 assume !(1 == initPersonOnFloor_~person#1); 1062013#L1497 assume !(2 == initPersonOnFloor_~person#1); 1060353#L1500 assume !(3 == initPersonOnFloor_~person#1); 1060354#L1503 assume !(4 == initPersonOnFloor_~person#1); 1060644#L1506 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1060645#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1061131#L940 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1062234#L943 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1060023#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1060024#L1255 assume !(0 == callOnFloor_~floorID#1); 1061754#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1060569#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1062534#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1062532#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1062531#L1829-1 assume !(0 == getOrigin_~person#1); 1062530#L1833-1 assume !(1 == getOrigin_~person#1); 1062528#L1837-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1062527#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1062526#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 1062523#L1490-1 assume 1 == initPersonOnFloor_~floor#1; 1062522#L1491-2 assume !(0 == initPersonOnFloor_~person#1); 1062521#L1494-2 assume !(1 == initPersonOnFloor_~person#1); 1062512#L1497-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1062505#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1062504#L940-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1062503#L943-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1062499#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1062498#L1255-2 assume !(0 == callOnFloor_~floorID#1); 1062497#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1062493#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1062492#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1062491#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1062490#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1062489#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1062488#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1060709#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1060710#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1061575#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1062333#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1062536#L2908 assume !(0 != timeShift_~tmp___9~2#1); 1062377#L2999 assume !(1 == ~doorState~0); 1061477#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1061076#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 1061077#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1062133#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1061671#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1061672#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1062085#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1062486#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 1061154#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1061075#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1061861#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1060418#L2727-2 assume !(1 == ~currentHeading~0); 1060231#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1060232#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1061341#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1060198#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1061636#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1061046#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1061047#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1060395#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1060243#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1060344#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1060242#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1062278#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1062349#L707-2 [2024-11-19 14:50:08,200 INFO L747 eck$LassoCheckResult]: Loop: 1062349#L707-2 assume !false; 1077127#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1077128#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1077061#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1077062#L715 assume 1 != cleanup_~tmp___0~2#1; 1077055#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1077056#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1077050#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1077051#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1069915#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1069917#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1069901#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1069898#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1069880#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1069876#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1069871#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1069872#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1069847#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 1069848#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1077228#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1080458#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1080457#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1080456#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1080452#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1080450#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1080444#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1080442#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1062573#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1062571#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1062568#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1062565#L2520-2 assume !(0 == ~currentFloorID~0); 1062561#L2526-2 assume ~currentFloorID~0 > 0; 1062555#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1062556#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1065019#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 1065013#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1064994#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1064985#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1064980#L2727-3 assume !(1 == ~currentHeading~0); 1064970#L2737-9 assume !(0 == ~currentFloorID~0); 1064967#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1064962#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1064961#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1064951#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1064948#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1064602#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1063172#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1063173#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1063019#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1063020#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1062984#L707-2 assume !false; 1062985#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1062980#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1062981#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1062976#L715 assume 1 != cleanup_~tmp___0~2#1; 1062977#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1062972#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1062973#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1062967#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1062968#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1062960#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1062961#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1062934#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1062935#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1062918#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1062919#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1062914#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1062915#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1062912#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1062911#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1062910#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1062909#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1062907#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1062906#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1062904#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1062903#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1062902#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1060233#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1060234#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1060717#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1060547#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1060548#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1061064#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1062887#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 1062888#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1069308#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1069306#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1069307#L2727-5 assume !(1 == ~currentHeading~0); 1069694#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1061977#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1061137#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1060929#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1077161#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1077262#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1077261#$Ultimate##5367 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1077142#$Ultimate##5376 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1077138#$Ultimate##5385 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1077134#$Ultimate##5394 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1077135#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1077131#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1062349#L707-2 [2024-11-19 14:50:08,200 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:08,200 INFO L85 PathProgramCache]: Analyzing trace with hash -1433693616, now seen corresponding path program 1 times [2024-11-19 14:50:08,201 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:08,201 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1940746410] [2024-11-19 14:50:08,201 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:08,201 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:08,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:08,277 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:08,277 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:08,277 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1940746410] [2024-11-19 14:50:08,277 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1940746410] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:08,277 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:08,277 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:50:08,277 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2119657780] [2024-11-19 14:50:08,277 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:08,278 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:08,278 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:08,278 INFO L85 PathProgramCache]: Analyzing trace with hash -1733238948, now seen corresponding path program 4 times [2024-11-19 14:50:08,278 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:08,278 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [383152990] [2024-11-19 14:50:08,278 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-11-19 14:50:08,278 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:08,291 INFO L227 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-11-19 14:50:08,292 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:50:08,338 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:50:08,338 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:08,338 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [383152990] [2024-11-19 14:50:08,338 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [383152990] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:08,338 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:08,338 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:50:08,338 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1082681461] [2024-11-19 14:50:08,338 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:08,339 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:08,339 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:08,339 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:50:08,339 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:50:08,339 INFO L87 Difference]: Start difference. First operand 31069 states and 57028 transitions. cyclomatic complexity: 25960 Second operand has 5 states, 5 states have (on average 16.6) internal successors, (83), 5 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:08,470 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:08,470 INFO L93 Difference]: Finished difference Result 31057 states and 57010 transitions. [2024-11-19 14:50:08,470 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31057 states and 57010 transitions. [2024-11-19 14:50:08,829 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:08,915 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31057 states to 31057 states and 57010 transitions. [2024-11-19 14:50:08,915 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31057 [2024-11-19 14:50:08,941 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31057 [2024-11-19 14:50:08,941 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31057 states and 57010 transitions. [2024-11-19 14:50:08,963 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:08,964 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31057 states and 57010 transitions. [2024-11-19 14:50:08,981 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31057 states and 57010 transitions. [2024-11-19 14:50:09,223 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31057 to 31057. [2024-11-19 14:50:09,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31057 states, 31057 states have (on average 1.8356570177415719) internal successors, (57010), 31056 states have internal predecessors, (57010), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:09,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31057 states to 31057 states and 57010 transitions. [2024-11-19 14:50:09,307 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31057 states and 57010 transitions. [2024-11-19 14:50:09,307 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-19 14:50:09,308 INFO L425 stractBuchiCegarLoop]: Abstraction has 31057 states and 57010 transitions. [2024-11-19 14:50:09,308 INFO L332 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2024-11-19 14:50:09,308 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31057 states and 57010 transitions. [2024-11-19 14:50:09,407 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:09,407 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:09,407 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:09,411 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:09,411 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:09,412 INFO L745 eck$LassoCheckResult]: Stem: 1122447#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1122448#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1123581#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1123110#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1123111#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1122599#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1122600#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1124246#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1124427#L1829 assume !(0 == getOrigin_~person#1); 1123152#L1833 assume !(1 == getOrigin_~person#1); 1123148#L1837 assume !(2 == getOrigin_~person#1); 1123149#L1841 assume !(3 == getOrigin_~person#1); 1123989#L1845 assume !(4 == getOrigin_~person#1); 1124335#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1122469#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1122470#L1463 assume !(0 == initPersonOnFloor_~floor#1); 1124323#L1490 assume 1 == initPersonOnFloor_~floor#1; 1124112#L1491 assume !(0 == initPersonOnFloor_~person#1); 1124113#L1494 assume !(1 == initPersonOnFloor_~person#1); 1124148#L1497 assume !(2 == initPersonOnFloor_~person#1); 1122492#L1500 assume !(3 == initPersonOnFloor_~person#1); 1122493#L1503 assume !(4 == initPersonOnFloor_~person#1); 1122783#L1506 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1122784#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1123257#L940 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1124366#L943 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1122162#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1122163#L1255 assume !(0 == callOnFloor_~floorID#1); 1123886#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1122708#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1123681#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1122900#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1122813#L1829-1 assume !(0 == getOrigin_~person#1); 1122814#L1833-1 assume !(1 == getOrigin_~person#1); 1124179#L1837-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1122841#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1122842#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 1122849#L1490-1 assume !(1 == initPersonOnFloor_~floor#1); 1124190#L1517-1 assume !(2 == initPersonOnFloor_~floor#1); 1122700#L1544-1 assume !(3 == initPersonOnFloor_~floor#1); 1122702#L1571-2 assume !(4 == initPersonOnFloor_~floor#1); 1124648#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1124647#L940-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1124646#L943-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1124642#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1124641#L1255-2 assume !(0 == callOnFloor_~floorID#1); 1124640#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1124635#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1124634#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1124633#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1124632#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1124631#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1124630#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1122847#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1122848#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1123706#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1124462#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1124636#L2908 assume !(0 != timeShift_~tmp___9~2#1); 1124507#L2999 assume !(1 == ~doorState~0); 1123606#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1123202#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 1123203#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1124267#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1123800#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1123801#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1124220#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1124628#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 1123280#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1123201#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1123999#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1122557#L2727-2 assume !(1 == ~currentHeading~0); 1122371#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1122372#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1123468#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1122338#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1131143#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1123173#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1123174#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1122535#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1122383#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1122483#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1122382#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1124477#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1124478#L707-2 [2024-11-19 14:50:09,412 INFO L747 eck$LassoCheckResult]: Loop: 1124478#L707-2 assume !false; 1132063#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1132064#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1132059#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1132060#L715 assume 1 != cleanup_~tmp___0~2#1; 1132055#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1132056#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1132051#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1132052#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1132047#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1132045#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1132046#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1132019#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1132020#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1131914#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1131910#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1131911#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1131905#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 1131906#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1123844#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1122536#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1122537#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1123225#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1122167#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1122433#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1122435#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1124506#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1127437#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1127432#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1127430#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1125011#L2520-2 assume !(0 == ~currentFloorID~0); 1125010#L2526-2 assume ~currentFloorID~0 > 0; 1125005#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1125006#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1125008#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 1125009#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1127067#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1127059#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1127052#L2727-3 assume !(1 == ~currentHeading~0); 1127045#L2737-9 assume !(0 == ~currentFloorID~0); 1127035#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1127029#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1127030#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1131191#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1131190#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1131189#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1131188#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1125131#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1125126#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1125088#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1125089#L707-2 assume !false; 1125083#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1125084#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1125079#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1125080#L715 assume 1 != cleanup_~tmp___0~2#1; 1125075#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1125076#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1125071#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1125072#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1131181#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1131949#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1131948#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1131944#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1125036#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1125030#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1125031#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1125026#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1125027#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1125024#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1125023#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1125022#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1125021#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1125019#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1125018#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1125016#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1122828#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1122829#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1122373#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1122374#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1122831#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1122687#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1122688#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1123191#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1124995#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 1122461#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1122462#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1131837#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1122922#L2727-5 assume !(1 == ~currentHeading~0); 1122924#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1124117#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1123264#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1123063#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1137588#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1137589#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1137544#$Ultimate##5367 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1132081#$Ultimate##5376 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1132074#$Ultimate##5385 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1132070#$Ultimate##5394 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1132071#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1132067#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1124478#L707-2 [2024-11-19 14:50:09,413 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:09,413 INFO L85 PathProgramCache]: Analyzing trace with hash 832040656, now seen corresponding path program 1 times [2024-11-19 14:50:09,413 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:09,413 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1418531539] [2024-11-19 14:50:09,413 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:09,414 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:09,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:09,476 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:09,476 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:09,476 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1418531539] [2024-11-19 14:50:09,476 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1418531539] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:09,476 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:09,477 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:50:09,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1628876120] [2024-11-19 14:50:09,477 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:09,477 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:09,477 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:09,477 INFO L85 PathProgramCache]: Analyzing trace with hash -1733238948, now seen corresponding path program 5 times [2024-11-19 14:50:09,478 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:09,478 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [256119696] [2024-11-19 14:50:09,478 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-11-19 14:50:09,478 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:09,493 INFO L227 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:50:09,494 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:50:09,534 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:50:09,534 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:09,534 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [256119696] [2024-11-19 14:50:09,534 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [256119696] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:09,534 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:09,534 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:50:09,535 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2006160942] [2024-11-19 14:50:09,535 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:09,535 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:09,535 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:09,535 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:50:09,535 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:50:09,536 INFO L87 Difference]: Start difference. First operand 31057 states and 57010 transitions. cyclomatic complexity: 25954 Second operand has 4 states, 4 states have (on average 20.75) internal successors, (83), 4 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:09,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:09,672 INFO L93 Difference]: Finished difference Result 31029 states and 56968 transitions. [2024-11-19 14:50:09,672 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31029 states and 56968 transitions. [2024-11-19 14:50:09,830 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:09,920 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31029 states to 31029 states and 56968 transitions. [2024-11-19 14:50:09,920 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31029 [2024-11-19 14:50:09,944 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31029 [2024-11-19 14:50:09,945 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31029 states and 56968 transitions. [2024-11-19 14:50:09,970 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:09,971 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31029 states and 56968 transitions. [2024-11-19 14:50:09,993 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31029 states and 56968 transitions. [2024-11-19 14:50:10,513 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31029 to 31029. [2024-11-19 14:50:10,536 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31029 states, 31029 states have (on average 1.8359599084727192) internal successors, (56968), 31028 states have internal predecessors, (56968), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:10,582 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31029 states to 31029 states and 56968 transitions. [2024-11-19 14:50:10,582 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31029 states and 56968 transitions. [2024-11-19 14:50:10,582 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:50:10,583 INFO L425 stractBuchiCegarLoop]: Abstraction has 31029 states and 56968 transitions. [2024-11-19 14:50:10,583 INFO L332 stractBuchiCegarLoop]: ======== Iteration 27 ============ [2024-11-19 14:50:10,583 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31029 states and 56968 transitions. [2024-11-19 14:50:10,655 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:10,656 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:10,656 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:10,658 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:10,658 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:10,659 INFO L745 eck$LassoCheckResult]: Stem: 1184543#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1184544#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1185665#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1185198#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1185199#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1184694#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1184695#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1186305#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1186487#L1829 assume !(0 == getOrigin_~person#1); 1185243#L1833 assume !(1 == getOrigin_~person#1); 1185239#L1837 assume !(2 == getOrigin_~person#1); 1185240#L1841 assume !(3 == getOrigin_~person#1); 1186056#L1845 assume !(4 == getOrigin_~person#1); 1186400#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1184564#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1184565#L1463 assume !(0 == initPersonOnFloor_~floor#1); 1186386#L1490 assume 1 == initPersonOnFloor_~floor#1; 1186172#L1491 assume !(0 == initPersonOnFloor_~person#1); 1186173#L1494 assume !(1 == initPersonOnFloor_~person#1); 1186207#L1497 assume !(2 == initPersonOnFloor_~person#1); 1184587#L1500 assume !(3 == initPersonOnFloor_~person#1); 1184588#L1503 assume !(4 == initPersonOnFloor_~person#1); 1184872#L1506 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1184873#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1185347#L940 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1186429#L943 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1184258#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1184259#L1255 assume !(0 == callOnFloor_~floorID#1); 1185961#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1184798#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1186692#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1186691#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1186690#L1829-1 assume !(0 == getOrigin_~person#1); 1186689#L1833-1 assume !(1 == getOrigin_~person#1); 1186688#L1837-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1186687#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1186686#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 1186685#L1490-1 assume !(1 == initPersonOnFloor_~floor#1); 1186684#L1517-1 assume 2 == initPersonOnFloor_~floor#1; 1186683#L1518-2 assume !(0 == initPersonOnFloor_~person#1); 1186682#L1521-2 assume !(1 == initPersonOnFloor_~person#1); 1186679#L1524-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1186677#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1186676#L940-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1186675#L943-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1186671#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1186670#L1255-2 assume !(0 == callOnFloor_~floorID#1); 1186669#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1186665#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1186664#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1186663#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1186662#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1186660#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1186659#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1184936#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1184937#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1185785#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1186524#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1186661#L2908 assume !(0 != timeShift_~tmp___9~2#1); 1186566#L2999 assume !(1 == ~doorState~0); 1185691#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1185293#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 1185294#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1186328#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1185878#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1185879#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1186277#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1186658#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 1185370#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1185292#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1186065#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1184652#L2727-2 assume !(1 == ~currentHeading~0); 1184466#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1184467#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1185555#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1184433#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1185848#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1185265#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1185266#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1185947#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1193865#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1193862#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1186474#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1186475#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1186539#L707-2 [2024-11-19 14:50:10,659 INFO L747 eck$LassoCheckResult]: Loop: 1186539#L707-2 assume !false; 1207642#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1207641#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1207640#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1207639#L715 assume 1 != cleanup_~tmp___0~2#1; 1207638#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1207637#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1207636#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1207634#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1207635#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1209051#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1209050#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1209046#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1209029#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1209024#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1209023#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1209022#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1209021#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 1209020#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1209018#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1209017#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1209016#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1209015#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1209011#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1209009#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1209003#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1209001#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1189209#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1189207#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1189205#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1189203#L2520-2 assume !(0 == ~currentFloorID~0); 1189201#L2526-2 assume ~currentFloorID~0 > 0; 1189200#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1189195#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1189193#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 1189191#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1189178#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1189176#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1189173#L2727-3 assume !(1 == ~currentHeading~0); 1189172#L2737-9 assume !(0 == ~currentFloorID~0); 1189170#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1188840#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1188839#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1188838#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1188835#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1188836#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1188837#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1187378#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1187373#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1187335#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1187336#L707-2 assume !false; 1187330#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1187331#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1187326#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1187327#L715 assume 1 != cleanup_~tmp___0~2#1; 1187322#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1187323#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1187318#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1187319#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1193982#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1194058#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1187298#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1187285#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1187286#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1187269#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1187270#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1187265#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1187266#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1187263#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1187262#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1187261#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1187260#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1187258#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1187257#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1187255#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1187254#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1187253#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1187252#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1185207#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1185208#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1184781#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1184782#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1185282#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1193763#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 1184557#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1184372#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1193880#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1185009#L2727-5 assume !(1 == ~currentHeading~0); 1185011#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1186176#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1185353#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1185152#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1207658#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1207657#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1207656#$Ultimate##5367 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1207655#L994-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1207654#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret50#1;havoc __utac_acc__Specification1_spec__3_#t~ret50#1; 1207651#L998-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 1207644#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1207643#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1186539#L707-2 [2024-11-19 14:50:10,660 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:10,660 INFO L85 PathProgramCache]: Analyzing trace with hash 2017061109, now seen corresponding path program 1 times [2024-11-19 14:50:10,660 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:10,660 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [670547084] [2024-11-19 14:50:10,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:10,660 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:10,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:10,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:10,742 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:10,742 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [670547084] [2024-11-19 14:50:10,742 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [670547084] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:10,742 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:10,742 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-19 14:50:10,742 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [530555188] [2024-11-19 14:50:10,742 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:10,743 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:10,743 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:10,744 INFO L85 PathProgramCache]: Analyzing trace with hash 2071601050, now seen corresponding path program 7 times [2024-11-19 14:50:10,744 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:10,744 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [179354937] [2024-11-19 14:50:10,744 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-11-19 14:50:10,744 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:10,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:10,804 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:50:10,804 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:10,804 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [179354937] [2024-11-19 14:50:10,804 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [179354937] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:10,805 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:10,805 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:50:10,805 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1584409374] [2024-11-19 14:50:10,805 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:10,806 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:10,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:10,806 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-19 14:50:10,806 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-19 14:50:10,806 INFO L87 Difference]: Start difference. First operand 31029 states and 56968 transitions. cyclomatic complexity: 25940 Second operand has 6 states, 6 states have (on average 14.0) internal successors, (84), 6 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:10,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:10,970 INFO L93 Difference]: Finished difference Result 31029 states and 56966 transitions. [2024-11-19 14:50:10,970 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31029 states and 56966 transitions. [2024-11-19 14:50:11,083 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:11,156 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31029 states to 31029 states and 56966 transitions. [2024-11-19 14:50:11,157 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31029 [2024-11-19 14:50:11,176 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31029 [2024-11-19 14:50:11,176 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31029 states and 56966 transitions. [2024-11-19 14:50:11,195 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:11,196 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31029 states and 56966 transitions. [2024-11-19 14:50:11,207 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31029 states and 56966 transitions. [2024-11-19 14:50:11,714 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31029 to 31029. [2024-11-19 14:50:11,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31029 states, 31029 states have (on average 1.8358954526410778) internal successors, (56966), 31028 states have internal predecessors, (56966), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:11,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31029 states to 31029 states and 56966 transitions. [2024-11-19 14:50:11,788 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31029 states and 56966 transitions. [2024-11-19 14:50:11,789 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-19 14:50:11,789 INFO L425 stractBuchiCegarLoop]: Abstraction has 31029 states and 56966 transitions. [2024-11-19 14:50:11,789 INFO L332 stractBuchiCegarLoop]: ======== Iteration 28 ============ [2024-11-19 14:50:11,789 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31029 states and 56966 transitions. [2024-11-19 14:50:11,873 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:11,874 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:11,874 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:11,877 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:11,877 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:11,878 INFO L745 eck$LassoCheckResult]: Stem: 1246612#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1246613#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1247739#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1247265#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1247266#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1246762#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1246763#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1248402#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1248592#L1829 assume !(0 == getOrigin_~person#1); 1247310#L1833 assume !(1 == getOrigin_~person#1); 1247306#L1837 assume !(2 == getOrigin_~person#1); 1247307#L1841 assume !(3 == getOrigin_~person#1); 1248144#L1845 assume !(4 == getOrigin_~person#1); 1248500#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1246633#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1246634#L1463 assume !(0 == initPersonOnFloor_~floor#1); 1248486#L1490 assume 1 == initPersonOnFloor_~floor#1; 1248268#L1491 assume !(0 == initPersonOnFloor_~person#1); 1248269#L1494 assume !(1 == initPersonOnFloor_~person#1); 1248305#L1497 assume !(2 == initPersonOnFloor_~person#1); 1246656#L1500 assume !(3 == initPersonOnFloor_~person#1); 1246657#L1503 assume !(4 == initPersonOnFloor_~person#1); 1246939#L1506 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1246940#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1247415#L940 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1248531#L943 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1246330#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1246331#L1255 assume !(0 == callOnFloor_~floorID#1); 1248037#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1246865#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1248821#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1248820#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1248819#L1829-1 assume !(0 == getOrigin_~person#1); 1248818#L1833-1 assume !(1 == getOrigin_~person#1); 1248817#L1837-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1248816#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1248815#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 1248814#L1490-1 assume !(1 == initPersonOnFloor_~floor#1); 1248813#L1517-1 assume 2 == initPersonOnFloor_~floor#1; 1248812#L1518-2 assume !(0 == initPersonOnFloor_~person#1); 1248811#L1521-2 assume !(1 == initPersonOnFloor_~person#1); 1248808#L1524-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1248806#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1248805#L940-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1248804#L943-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1248802#L946-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1248800#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1248799#L1255-2 assume !(0 == callOnFloor_~floorID#1); 1248798#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1248794#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1248793#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1248792#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1248791#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1248789#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1248788#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1247003#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1247004#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1247859#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1248625#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1248790#L2908 assume !(0 != timeShift_~tmp___9~2#1); 1248676#L2999 assume !(1 == ~doorState~0); 1247765#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1247360#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 1247361#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1248427#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1247952#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1247953#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1248376#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1248787#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 1247440#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1247359#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1248152#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1246721#L2727-2 assume !(1 == ~currentHeading~0); 1246536#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1246537#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1247630#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1246503#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1247922#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1247332#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1247333#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1246698#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1246548#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1246647#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1246547#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1248642#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1248643#L707-2 [2024-11-19 14:50:11,878 INFO L747 eck$LassoCheckResult]: Loop: 1248643#L707-2 assume !false; 1256206#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1256205#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1256204#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1256203#L715 assume 1 != cleanup_~tmp___0~2#1; 1256202#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1256201#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1256200#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1256198#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1256196#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1256197#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1270709#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1270699#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1270221#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1270207#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1270205#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1263539#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1263540#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 1270199#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1270198#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1275019#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1275018#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1275017#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1275013#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1275011#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1275010#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1275009#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1253090#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1253088#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1253086#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1253087#L2520-2 assume !(0 == ~currentFloorID~0); 1253099#L2526-2 assume ~currentFloorID~0 > 0; 1253098#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1253097#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1253096#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 1253016#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1253001#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1252996#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1252993#L2727-3 assume !(1 == ~currentHeading~0); 1252989#L2737-9 assume !(0 == ~currentFloorID~0); 1251395#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1251390#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1251391#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1256087#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1256084#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1256085#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1249503#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1249504#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1249469#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1249470#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1249434#L707-2 assume !false; 1249435#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1249430#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1249431#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1249426#L715 assume 1 != cleanup_~tmp___0~2#1; 1249427#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1249422#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1249423#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1249417#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1249418#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1249411#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1249400#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1249386#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1249387#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1262907#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1262895#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1249368#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1249369#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1249366#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1249365#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1249364#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1249363#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1249361#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1249360#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1249358#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1249357#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1249356#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1249355#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1247275#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1247011#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1246849#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1246850#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1247349#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1255895#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 1246624#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1246442#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1248006#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1255956#L2727-5 assume !(1 == ~currentHeading~0); 1248386#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1248272#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1247423#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1247218#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1256226#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1256225#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1256224#$Ultimate##5367 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1256216#$Ultimate##5376 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1256212#$Ultimate##5385 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1256209#$Ultimate##5394 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1256208#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1256207#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1248643#L707-2 [2024-11-19 14:50:11,878 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:11,879 INFO L85 PathProgramCache]: Analyzing trace with hash -1310494903, now seen corresponding path program 1 times [2024-11-19 14:50:11,879 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:11,879 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [613937758] [2024-11-19 14:50:11,879 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:11,879 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:11,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:11,958 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:11,959 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:11,959 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [613937758] [2024-11-19 14:50:11,959 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [613937758] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:11,959 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:11,959 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-19 14:50:11,959 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [625997297] [2024-11-19 14:50:11,959 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:11,959 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:11,960 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:11,960 INFO L85 PathProgramCache]: Analyzing trace with hash -1733238948, now seen corresponding path program 6 times [2024-11-19 14:50:11,960 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:11,960 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1607399715] [2024-11-19 14:50:11,960 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-11-19 14:50:11,960 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:11,974 INFO L227 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 1 check-sat command(s) [2024-11-19 14:50:11,974 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:50:12,024 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-11-19 14:50:12,024 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:12,024 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1607399715] [2024-11-19 14:50:12,024 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1607399715] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:12,024 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:12,024 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:50:12,025 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2059791548] [2024-11-19 14:50:12,025 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:12,025 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:12,025 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:12,025 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-19 14:50:12,025 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-19 14:50:12,025 INFO L87 Difference]: Start difference. First operand 31029 states and 56966 transitions. cyclomatic complexity: 25938 Second operand has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:12,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:12,195 INFO L93 Difference]: Finished difference Result 31029 states and 56964 transitions. [2024-11-19 14:50:12,195 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31029 states and 56964 transitions. [2024-11-19 14:50:12,340 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:12,437 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31029 states to 31029 states and 56964 transitions. [2024-11-19 14:50:12,438 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31029 [2024-11-19 14:50:12,468 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31029 [2024-11-19 14:50:12,468 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31029 states and 56964 transitions. [2024-11-19 14:50:12,492 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:12,492 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31029 states and 56964 transitions. [2024-11-19 14:50:12,515 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31029 states and 56964 transitions. [2024-11-19 14:50:13,234 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31029 to 31029. [2024-11-19 14:50:13,313 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31029 states, 31029 states have (on average 1.8358309968094364) internal successors, (56964), 31028 states have internal predecessors, (56964), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:13,377 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31029 states to 31029 states and 56964 transitions. [2024-11-19 14:50:13,377 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31029 states and 56964 transitions. [2024-11-19 14:50:13,378 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-19 14:50:13,378 INFO L425 stractBuchiCegarLoop]: Abstraction has 31029 states and 56964 transitions. [2024-11-19 14:50:13,378 INFO L332 stractBuchiCegarLoop]: ======== Iteration 29 ============ [2024-11-19 14:50:13,378 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31029 states and 56964 transitions. [2024-11-19 14:50:13,465 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27768 [2024-11-19 14:50:13,466 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:13,466 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:13,470 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:13,470 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:13,471 INFO L745 eck$LassoCheckResult]: Stem: 1308685#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1308686#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1309821#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1309344#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1309345#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1308837#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1308838#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1310480#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1310667#L1829 assume !(0 == getOrigin_~person#1); 1309391#L1833 assume !(1 == getOrigin_~person#1); 1309386#L1837 assume !(2 == getOrigin_~person#1); 1309387#L1841 assume !(3 == getOrigin_~person#1); 1310221#L1845 assume !(4 == getOrigin_~person#1); 1310570#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1308707#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1308708#L1463 assume !(0 == initPersonOnFloor_~floor#1); 1310556#L1490 assume 1 == initPersonOnFloor_~floor#1; 1310343#L1491 assume !(0 == initPersonOnFloor_~person#1); 1310344#L1494 assume !(1 == initPersonOnFloor_~person#1); 1310380#L1497 assume !(2 == initPersonOnFloor_~person#1); 1308730#L1500 assume !(3 == initPersonOnFloor_~person#1); 1308731#L1503 assume !(4 == initPersonOnFloor_~person#1); 1309017#L1506 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1309018#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1309495#L940 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1310601#L943 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1308402#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1308403#L1255 assume !(0 == callOnFloor_~floorID#1); 1310119#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1308942#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1310892#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1310891#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1310890#L1829-1 assume !(0 == getOrigin_~person#1); 1310889#L1833-1 assume !(1 == getOrigin_~person#1); 1310888#L1837-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1310887#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1310886#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 1310885#L1490-1 assume !(1 == initPersonOnFloor_~floor#1); 1310884#L1517-1 assume 2 == initPersonOnFloor_~floor#1; 1310883#L1518-2 assume !(0 == initPersonOnFloor_~person#1); 1310882#L1521-2 assume !(1 == initPersonOnFloor_~person#1); 1308915#L1524-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1308456#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1308457#L940-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1310504#L943-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1309445#L946-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1308930#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1310872#L1255-2 assume !(0 == callOnFloor_~floorID#1); 1310871#L1258-2 assume !(1 == callOnFloor_~floorID#1); 1310868#L1261-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1310867#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1310866#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1310863#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1310862#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1310861#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1310859#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1309082#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1309083#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1309938#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1310704#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1310864#L2908 assume !(0 != timeShift_~tmp___9~2#1); 1310752#L2999 assume !(1 == ~doorState~0); 1309847#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1309442#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 1309443#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1310501#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1310033#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1310034#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1310453#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1310858#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 1309520#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1309441#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1310229#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1308794#L2727-2 assume !(1 == ~currentHeading~0); 1308608#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1308609#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1309712#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1308575#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1310003#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1309412#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1309413#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1308772#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1308620#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1308721#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1308619#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1310655#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1310720#L707-2 [2024-11-19 14:50:13,471 INFO L747 eck$LassoCheckResult]: Loop: 1310720#L707-2 assume !false; 1318284#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1318285#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1318280#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1318281#L715 assume 1 != cleanup_~tmp___0~2#1; 1318276#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1318277#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1318272#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1318273#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1318265#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1318263#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1318253#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1318250#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1318229#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1318225#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1318220#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1318221#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1318184#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 1318185#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1332586#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1332583#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1332584#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1332594#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1332587#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1332585#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1332571#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1332562#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1311573#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1311574#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1313960#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1311552#L2520-2 assume !(0 == ~currentFloorID~0); 1311549#L2526-2 assume ~currentFloorID~0 > 0; 1311494#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1311495#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1310738#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 1310739#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1313811#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1312397#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1312395#L2727-3 assume !(1 == ~currentHeading~0); 1312394#L2737-9 assume !(0 == ~currentFloorID~0); 1311832#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1311707#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1311706#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1311703#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1311699#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1311700#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1311702#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1311727#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1311664#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1311665#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1311629#L707-2 assume !false; 1311630#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1311625#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1311626#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1311621#L715 assume 1 != cleanup_~tmp___0~2#1; 1311622#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1311617#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1311618#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1311612#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1311613#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1311604#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1311605#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1311577#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1311578#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1311558#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1311559#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1311550#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1311551#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1311547#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1311546#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1311545#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1311544#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1311542#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1311541#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1311539#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1311538#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1311529#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1311516#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1311507#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1311467#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1311458#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1311456#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1311450#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1311448#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 1311447#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1309416#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1309773#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1309155#L2727-5 assume !(1 == ~currentHeading~0); 1309157#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1318083#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1309504#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1309297#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1321848#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1321849#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1321845#$Ultimate##5367 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1321843#L994-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1321844#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret50#1;havoc __utac_acc__Specification1_spec__3_#t~ret50#1; 1318301#L998-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 1318292#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1318288#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1310720#L707-2 [2024-11-19 14:50:13,472 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:13,472 INFO L85 PathProgramCache]: Analyzing trace with hash -455835799, now seen corresponding path program 1 times [2024-11-19 14:50:13,472 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:13,472 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [110132792] [2024-11-19 14:50:13,472 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:13,472 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:13,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:13,503 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:13,503 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:13,503 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [110132792] [2024-11-19 14:50:13,503 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [110132792] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:13,503 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:13,503 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-19 14:50:13,503 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1358079763] [2024-11-19 14:50:13,503 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:13,503 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:13,503 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:13,504 INFO L85 PathProgramCache]: Analyzing trace with hash 2071601050, now seen corresponding path program 8 times [2024-11-19 14:50:13,504 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:13,504 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [919846726] [2024-11-19 14:50:13,504 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-19 14:50:13,504 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:13,517 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-19 14:50:13,517 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:50:13,538 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-11-19 14:50:13,538 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:13,538 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [919846726] [2024-11-19 14:50:13,538 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [919846726] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:13,538 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:13,538 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:50:13,538 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [774686925] [2024-11-19 14:50:13,538 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:13,539 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:13,539 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:13,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-19 14:50:13,539 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-19 14:50:13,539 INFO L87 Difference]: Start difference. First operand 31029 states and 56964 transitions. cyclomatic complexity: 25936 Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 2 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:13,655 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:13,656 INFO L93 Difference]: Finished difference Result 31265 states and 57322 transitions. [2024-11-19 14:50:13,656 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31265 states and 57322 transitions. [2024-11-19 14:50:13,775 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 28004 [2024-11-19 14:50:13,854 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31265 states to 31265 states and 57322 transitions. [2024-11-19 14:50:13,855 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31265 [2024-11-19 14:50:13,879 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31265 [2024-11-19 14:50:13,880 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31265 states and 57322 transitions. [2024-11-19 14:50:13,901 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:13,901 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31265 states and 57322 transitions. [2024-11-19 14:50:13,918 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31265 states and 57322 transitions. [2024-11-19 14:50:14,097 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31265 to 31220. [2024-11-19 14:50:14,125 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31220 states, 31220 states have (on average 1.834593209481102) internal successors, (57276), 31219 states have internal predecessors, (57276), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:14,177 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31220 states to 31220 states and 57276 transitions. [2024-11-19 14:50:14,178 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31220 states and 57276 transitions. [2024-11-19 14:50:14,178 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-19 14:50:14,179 INFO L425 stractBuchiCegarLoop]: Abstraction has 31220 states and 57276 transitions. [2024-11-19 14:50:14,179 INFO L332 stractBuchiCegarLoop]: ======== Iteration 30 ============ [2024-11-19 14:50:14,179 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31220 states and 57276 transitions. [2024-11-19 14:50:14,285 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27959 [2024-11-19 14:50:14,285 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:14,285 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:14,290 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:14,290 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:14,290 INFO L745 eck$LassoCheckResult]: Stem: 1370988#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1370989#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1372111#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1371646#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1371647#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1371139#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1371140#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1372765#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1372930#L1829 assume !(0 == getOrigin_~person#1); 1371689#L1833 assume !(1 == getOrigin_~person#1); 1371685#L1837 assume !(2 == getOrigin_~person#1); 1371686#L1841 assume !(3 == getOrigin_~person#1); 1372513#L1845 assume !(4 == getOrigin_~person#1); 1372849#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1371010#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1371011#L1463 assume !(0 == initPersonOnFloor_~floor#1); 1372834#L1490 assume 1 == initPersonOnFloor_~floor#1; 1372637#L1491 assume !(0 == initPersonOnFloor_~person#1); 1372638#L1494 assume !(1 == initPersonOnFloor_~person#1); 1372675#L1497 assume !(2 == initPersonOnFloor_~person#1); 1371033#L1500 assume !(3 == initPersonOnFloor_~person#1); 1371034#L1503 assume !(4 == initPersonOnFloor_~person#1); 1371316#L1506 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1371317#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1371791#L940 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1372876#L943 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1370706#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1370707#L1255 assume !(0 == callOnFloor_~floorID#1); 1372406#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1371242#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1373148#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1373147#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1373146#L1829-1 assume !(0 == getOrigin_~person#1); 1373145#L1833-1 assume !(1 == getOrigin_~person#1); 1373144#L1837-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1373143#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1373142#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 1373141#L1490-1 assume !(1 == initPersonOnFloor_~floor#1); 1373140#L1517-1 assume 2 == initPersonOnFloor_~floor#1; 1373139#L1518-2 assume !(0 == initPersonOnFloor_~person#1); 1373138#L1521-2 assume !(1 == initPersonOnFloor_~person#1); 1371216#L1524-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1370760#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1370761#L940-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1372788#L943-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1371742#L946-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1371231#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1373128#L1255-2 assume !(0 == callOnFloor_~floorID#1); 1373127#L1258-2 assume !(1 == callOnFloor_~floorID#1); 1373124#L1261-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1373123#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1373122#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1373120#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1373119#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1373118#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1373116#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1371381#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1371382#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1372233#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1372968#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1373121#L2908 assume !(0 != timeShift_~tmp___9~2#1); 1373013#L2999 assume 1 == ~doorState~0;~doorState~0 := 0; 1372138#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1371739#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 1371740#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1372785#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1372324#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1372325#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1372739#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1373115#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 1371816#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1371738#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1372522#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1371097#L2727-2 assume !(1 == ~currentHeading~0); 1370912#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1370913#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1372000#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1370879#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1372294#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1371710#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1371711#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1380324#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1380321#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1380318#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1380317#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1380314#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1380313#L707-2 [2024-11-19 14:50:14,291 INFO L747 eck$LassoCheckResult]: Loop: 1380313#L707-2 assume !false; 1380311#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1380309#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1380307#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1380305#L715 assume 1 != cleanup_~tmp___0~2#1; 1380281#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1380279#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1380272#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1380266#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1373426#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1373427#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1383788#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1380451#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1379391#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1379385#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1379383#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1379381#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1379379#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 1379376#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1379374#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1379372#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1379370#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1379368#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1379363#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1379359#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1379357#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1378245#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1378243#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1378240#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1378237#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1378238#L2520-2 assume !(0 == ~currentFloorID~0); 1378167#L2526-2 assume ~currentFloorID~0 > 0; 1378164#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1378163#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1378161#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 1378129#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1378113#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1378106#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1378104#L2727-3 assume !(1 == ~currentHeading~0); 1378101#L2737-9 assume !(0 == ~currentFloorID~0); 1378096#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1375331#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1375330#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1375329#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1375303#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1374283#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1374276#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1374269#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1374232#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1374230#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1374198#L707-2 assume !false; 1374196#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1374192#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1374190#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1374188#L715 assume 1 != cleanup_~tmp___0~2#1; 1374186#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1374184#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1374182#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1374179#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1374177#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1373798#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1373608#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1373600#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1373537#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1373521#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1373519#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1373517#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1373514#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1373512#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1373510#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1373508#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1373506#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1373504#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1373501#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1373499#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1373490#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1373488#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1373487#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1371655#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1371656#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1380225#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1380223#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1380221#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1380222#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 1380292#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1380215#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1372062#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1371454#L2727-5 assume !(1 == ~currentHeading~0); 1371456#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1372642#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1372643#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1380379#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1380378#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1380375#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1380374#$Ultimate##5367 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1380373#L994-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1380370#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret50#1;havoc __utac_acc__Specification1_spec__3_#t~ret50#1; 1380364#L998-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 1380357#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1380315#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1380313#L707-2 [2024-11-19 14:50:14,291 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:14,292 INFO L85 PathProgramCache]: Analyzing trace with hash -596384409, now seen corresponding path program 1 times [2024-11-19 14:50:14,292 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:14,292 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [537126521] [2024-11-19 14:50:14,292 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:14,292 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:14,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:14,623 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:14,623 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:14,627 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [537126521] [2024-11-19 14:50:14,627 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [537126521] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:14,627 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:14,627 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-19 14:50:14,627 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1582091635] [2024-11-19 14:50:14,627 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:14,628 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:14,628 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:14,628 INFO L85 PathProgramCache]: Analyzing trace with hash 2071601050, now seen corresponding path program 9 times [2024-11-19 14:50:14,628 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:14,628 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [373439265] [2024-11-19 14:50:14,628 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-11-19 14:50:14,628 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:14,652 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2024-11-19 14:50:14,653 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-19 14:50:14,678 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-11-19 14:50:14,679 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:14,679 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [373439265] [2024-11-19 14:50:14,679 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [373439265] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:14,679 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:14,679 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:50:14,679 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1778672004] [2024-11-19 14:50:14,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:14,680 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:14,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:14,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-19 14:50:14,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-19 14:50:14,680 INFO L87 Difference]: Start difference. First operand 31220 states and 57276 transitions. cyclomatic complexity: 26057 Second operand has 4 states, 4 states have (on average 21.5) internal successors, (86), 3 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:14,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:14,957 INFO L93 Difference]: Finished difference Result 58856 states and 107992 transitions. [2024-11-19 14:50:14,957 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58856 states and 107992 transitions. [2024-11-19 14:50:15,300 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 55571 [2024-11-19 14:50:15,544 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58856 states to 58856 states and 107992 transitions. [2024-11-19 14:50:15,544 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58856 [2024-11-19 14:50:15,609 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58856 [2024-11-19 14:50:15,610 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58856 states and 107992 transitions. [2024-11-19 14:50:15,671 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:15,671 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58856 states and 107992 transitions. [2024-11-19 14:50:15,716 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58856 states and 107992 transitions. [2024-11-19 14:50:16,796 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58856 to 58846. [2024-11-19 14:50:16,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58846 states, 58846 states have (on average 1.8349080651191245) internal successors, (107977), 58845 states have internal predecessors, (107977), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:16,946 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58846 states to 58846 states and 107977 transitions. [2024-11-19 14:50:16,947 INFO L240 hiAutomatonCegarLoop]: Abstraction has 58846 states and 107977 transitions. [2024-11-19 14:50:16,947 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-19 14:50:16,947 INFO L425 stractBuchiCegarLoop]: Abstraction has 58846 states and 107977 transitions. [2024-11-19 14:50:16,947 INFO L332 stractBuchiCegarLoop]: ======== Iteration 31 ============ [2024-11-19 14:50:16,947 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 58846 states and 107977 transitions. [2024-11-19 14:50:17,113 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 55561 [2024-11-19 14:50:17,114 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:17,114 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:17,122 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:17,122 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:17,123 INFO L745 eck$LassoCheckResult]: Stem: 1461073#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1461074#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1462203#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1461730#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1461731#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1461224#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1461225#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1462856#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1463037#L1829 assume !(0 == getOrigin_~person#1); 1461775#L1833 assume !(1 == getOrigin_~person#1); 1461771#L1837 assume !(2 == getOrigin_~person#1); 1461772#L1841 assume !(3 == getOrigin_~person#1); 1462597#L1845 assume !(4 == getOrigin_~person#1); 1462944#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1461095#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1461096#L1463 assume !(0 == initPersonOnFloor_~floor#1); 1462930#L1490 assume 1 == initPersonOnFloor_~floor#1; 1462721#L1491 assume !(0 == initPersonOnFloor_~person#1); 1462722#L1494 assume !(1 == initPersonOnFloor_~person#1); 1462760#L1497 assume !(2 == initPersonOnFloor_~person#1); 1461118#L1500 assume !(3 == initPersonOnFloor_~person#1); 1461119#L1503 assume !(4 == initPersonOnFloor_~person#1); 1461403#L1506 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1461404#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1461880#L940 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1462975#L943 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1460793#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1460794#L1255 assume !(0 == callOnFloor_~floorID#1); 1462496#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1461328#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1463262#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1463259#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1463258#L1829-1 assume !(0 == getOrigin_~person#1); 1463257#L1833-1 assume !(1 == getOrigin_~person#1); 1463256#L1837-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1463255#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1463254#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 1463253#L1490-1 assume !(1 == initPersonOnFloor_~floor#1); 1463252#L1517-1 assume 2 == initPersonOnFloor_~floor#1; 1463251#L1518-2 assume !(0 == initPersonOnFloor_~person#1); 1463250#L1521-2 assume !(1 == initPersonOnFloor_~person#1); 1463247#L1524-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1463245#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1463244#L940-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1463243#L943-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1463241#L946-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1463239#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1463238#L1255-2 assume !(0 == callOnFloor_~floorID#1); 1463237#L1258-2 assume !(1 == callOnFloor_~floorID#1); 1463234#L1261-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1463233#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1463232#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1463231#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1463230#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1463229#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1463228#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1461467#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1461468#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1462318#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1463073#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1463260#L2908 assume !(0 != timeShift_~tmp___9~2#1); 1463117#L2999 assume 1 == ~doorState~0;~doorState~0 := 0; 1462228#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1461824#L2351 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1461825#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 1462629#L2355 assume 0 != stopRequestedInDirection_~tmp~20#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1462877#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1462413#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1462414#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1462830#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1463227#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 1461903#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1461823#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1462605#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1461182#L2727-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1461183#isTopFloor_returnLabel#5 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 1463095#L2731-6 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 1463161#L2737-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1462092#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1460966#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1462381#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1461796#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1461797#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1466019#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1466015#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1466012#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1466007#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1465986#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1465987#L707-2 [2024-11-19 14:50:17,123 INFO L747 eck$LassoCheckResult]: Loop: 1465987#L707-2 assume !false; 1466691#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1466690#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1466689#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1466688#L715 assume 1 != cleanup_~tmp___0~2#1; 1466687#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1466686#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1466685#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1466683#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1466682#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1466681#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1465958#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1465953#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1465898#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1465887#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1465886#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1465885#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1465884#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 1465882#L1192-26 assume !(1 == isFloorCalling_~floorID#1); 1465883#L1196-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1467433#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1467431#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1467429#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1467427#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1467422#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1467419#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1467411#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1465450#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1465449#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1465447#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1465446#L2351-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1465445#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 1465444#L2355-2 assume !(0 != stopRequestedInDirection_~tmp~20#1); 1465443#L2361-2 assume ~currentFloorID~0 < 0; 1461755#L2362-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1461354#L1188-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1461355#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret64#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret64#1;havoc stopRequestedInDirection_#t~ret64#1; 1461735#L2366-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1461736#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1465401#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1465146#L2727-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1465139#isTopFloor_returnLabel#7 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 1465130#L2731-9 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 1465123#L2737-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1465120#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1465119#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1465118#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1465117#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1465116#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1465115#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1465109#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1465091#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1465071#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1465072#L707-2 assume !false; 1465054#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1465055#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1464941#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1464927#L715 assume 1 != cleanup_~tmp___0~2#1; 1464928#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1466364#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1466362#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1466359#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1466358#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1466357#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1466352#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1466347#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1466327#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1466321#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1466319#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1466317#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1466314#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1466312#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1466310#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1466309#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1466308#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1466305#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1466303#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1466300#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1466298#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1466294#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1466293#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1461741#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1461742#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1465812#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1465810#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1465805#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1465801#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 1465800#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1465782#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1465776#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1465777#L2727-5 assume !(1 == ~currentHeading~0); 1465888#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1465765#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1465759#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1466191#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1466190#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1466188#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1466189#$Ultimate##5367 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1466705#L994-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1466703#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret50#1;havoc __utac_acc__Specification1_spec__3_#t~ret50#1; 1466700#L998-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 1466693#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1466692#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1465987#L707-2 [2024-11-19 14:50:17,124 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:17,124 INFO L85 PathProgramCache]: Analyzing trace with hash 1067054999, now seen corresponding path program 1 times [2024-11-19 14:50:17,124 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:17,124 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [4251953] [2024-11-19 14:50:17,128 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:17,128 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:17,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:17,254 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:17,254 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:17,254 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [4251953] [2024-11-19 14:50:17,254 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [4251953] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:17,255 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:17,258 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:50:17,258 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2117360830] [2024-11-19 14:50:17,258 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:17,258 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:17,259 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:17,259 INFO L85 PathProgramCache]: Analyzing trace with hash -1643808981, now seen corresponding path program 1 times [2024-11-19 14:50:17,259 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:17,259 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1379821227] [2024-11-19 14:50:17,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:17,259 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:17,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:17,337 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-11-19 14:50:17,337 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:17,338 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1379821227] [2024-11-19 14:50:17,338 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1379821227] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:17,338 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:17,338 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:50:17,338 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1727121784] [2024-11-19 14:50:17,338 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:17,338 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:17,338 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:17,338 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:50:17,339 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:50:17,339 INFO L87 Difference]: Start difference. First operand 58846 states and 107977 transitions. cyclomatic complexity: 49132 Second operand has 5 states, 5 states have (on average 17.6) internal successors, (88), 5 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:17,584 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:17,584 INFO L93 Difference]: Finished difference Result 58856 states and 107964 transitions. [2024-11-19 14:50:17,584 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58856 states and 107964 transitions. [2024-11-19 14:50:17,831 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 55571 [2024-11-19 14:50:18,033 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58856 states to 58856 states and 107964 transitions. [2024-11-19 14:50:18,034 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58856 [2024-11-19 14:50:18,085 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58856 [2024-11-19 14:50:18,086 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58856 states and 107964 transitions. [2024-11-19 14:50:18,121 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:18,122 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58856 states and 107964 transitions. [2024-11-19 14:50:18,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58856 states and 107964 transitions. [2024-11-19 14:50:19,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58856 to 58846. [2024-11-19 14:50:19,197 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58846 states, 58846 states have (on average 1.8344322468816912) internal successors, (107949), 58845 states have internal predecessors, (107949), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:19,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58846 states to 58846 states and 107949 transitions. [2024-11-19 14:50:19,293 INFO L240 hiAutomatonCegarLoop]: Abstraction has 58846 states and 107949 transitions. [2024-11-19 14:50:19,293 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-19 14:50:19,293 INFO L425 stractBuchiCegarLoop]: Abstraction has 58846 states and 107949 transitions. [2024-11-19 14:50:19,293 INFO L332 stractBuchiCegarLoop]: ======== Iteration 32 ============ [2024-11-19 14:50:19,294 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 58846 states and 107949 transitions. [2024-11-19 14:50:19,457 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 55561 [2024-11-19 14:50:19,457 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:19,457 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:19,464 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:19,464 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:19,465 INFO L745 eck$LassoCheckResult]: Stem: 1578787#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1578788#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1579915#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1579444#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1579445#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1578939#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1578940#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1580558#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1580739#L1829 assume !(0 == getOrigin_~person#1); 1579487#L1833 assume !(1 == getOrigin_~person#1); 1579483#L1837 assume !(2 == getOrigin_~person#1); 1579484#L1841 assume !(3 == getOrigin_~person#1); 1580309#L1845 assume !(4 == getOrigin_~person#1); 1580650#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1578809#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1578810#L1463 assume !(0 == initPersonOnFloor_~floor#1); 1580636#L1490 assume 1 == initPersonOnFloor_~floor#1; 1580429#L1491 assume !(0 == initPersonOnFloor_~person#1); 1580430#L1494 assume !(1 == initPersonOnFloor_~person#1); 1580468#L1497 assume !(2 == initPersonOnFloor_~person#1); 1578832#L1500 assume !(3 == initPersonOnFloor_~person#1); 1578833#L1503 assume !(4 == initPersonOnFloor_~person#1); 1579117#L1506 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1579118#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1579592#L940 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1580678#L943 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1578506#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1578507#L1255 assume !(0 == callOnFloor_~floorID#1); 1580209#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1579041#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1580970#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1580967#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1580966#L1829-1 assume !(0 == getOrigin_~person#1); 1580965#L1833-1 assume !(1 == getOrigin_~person#1); 1580964#L1837-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1580963#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1580962#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 1580961#L1490-1 assume !(1 == initPersonOnFloor_~floor#1); 1580960#L1517-1 assume 2 == initPersonOnFloor_~floor#1; 1580959#L1518-2 assume !(0 == initPersonOnFloor_~person#1); 1580958#L1521-2 assume !(1 == initPersonOnFloor_~person#1); 1580955#L1524-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1580953#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1580952#L940-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1580951#L943-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1580949#L946-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1580947#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1580946#L1255-2 assume !(0 == callOnFloor_~floorID#1); 1580945#L1258-2 assume !(1 == callOnFloor_~floorID#1); 1580942#L1261-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1580941#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1580940#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1580939#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1580938#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1580937#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1580936#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1579181#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1579182#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1580034#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1580780#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1580968#L2908 assume !(0 != timeShift_~tmp___9~2#1); 1580830#L2999 assume 1 == ~doorState~0;~doorState~0 := 0; 1579941#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1579538#L2351 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1579539#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 1580341#L2355 assume 0 != stopRequestedInDirection_~tmp~20#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1580581#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1580125#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1580126#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1580534#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1580935#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 1579614#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1579537#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1580318#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1578897#L2727-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1578898#isTopFloor_returnLabel#5 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 1580805#L2731-6 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 1579800#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1579801#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1588869#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1588868#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1588866#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1588864#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1588860#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1588856#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1588853#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1588852#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1588822#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1588821#L707-2 [2024-11-19 14:50:19,465 INFO L747 eck$LassoCheckResult]: Loop: 1588821#L707-2 assume !false; 1588820#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1588819#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1588818#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1588817#L715 assume 1 != cleanup_~tmp___0~2#1; 1588816#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1588815#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1588814#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1588813#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1588812#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1588811#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1588810#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1588806#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1588789#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1588784#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1588783#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1588477#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1588473#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 1588474#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1588460#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1588452#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1588453#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1626329#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1626324#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1588283#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1588285#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1588266#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1588264#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1588232#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1588226#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1588227#L2520-2 assume !(0 == ~currentFloorID~0); 1588271#L2526-2 assume ~currentFloorID~0 > 0; 1588269#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1588233#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1588215#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 1588207#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1588135#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1588136#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1588920#L2727-3 assume !(1 == ~currentHeading~0); 1588916#L2737-9 assume !(0 == ~currentFloorID~0); 1582064#L2737-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1588907#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1588906#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1588905#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1588904#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1588902#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1588898#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1588889#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1588883#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1588882#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1588880#L707-2 assume !false; 1588879#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1588878#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1588877#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1588875#L715 assume 1 != cleanup_~tmp___0~2#1; 1588872#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1588551#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1588550#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1588541#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1588537#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1588534#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1588522#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1588508#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1588498#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1588489#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1588481#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1588482#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1588751#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1588723#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1588711#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1588710#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1588707#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1588703#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1588695#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1588579#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1587522#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1587519#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1587353#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1579453#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1579454#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1588163#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1588158#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1588149#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1588144#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 1588139#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1578785#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1579866#L3016-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1579867#L2782-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1588702#getReverseHeading_returnLabel#4 timeShift_#t~ret99#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1580801#L2727-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1580802#isTopFloor_returnLabel#9 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 1580760#L2731-12 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 1580761#L2737-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1588851#L2743-9 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1588846#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1588845#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1588843#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1588841#$Ultimate##5367 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1588840#L994-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1588839#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret50#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret50#1;havoc __utac_acc__Specification1_spec__3_#t~ret50#1; 1588836#L998-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 1588825#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1588823#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1588821#L707-2 [2024-11-19 14:50:19,466 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:19,466 INFO L85 PathProgramCache]: Analyzing trace with hash 1768119577, now seen corresponding path program 1 times [2024-11-19 14:50:19,466 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:19,466 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [205010058] [2024-11-19 14:50:19,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:19,466 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:19,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:19,547 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:19,547 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:19,548 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [205010058] [2024-11-19 14:50:19,548 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [205010058] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:19,548 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:19,548 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-19 14:50:19,548 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [484233908] [2024-11-19 14:50:19,548 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:19,548 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:19,548 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:19,548 INFO L85 PathProgramCache]: Analyzing trace with hash 1155289746, now seen corresponding path program 1 times [2024-11-19 14:50:19,549 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:19,549 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1406770496] [2024-11-19 14:50:19,549 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:19,549 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:19,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:19,605 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-11-19 14:50:19,606 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:19,606 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1406770496] [2024-11-19 14:50:19,606 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1406770496] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:19,606 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:19,606 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-19 14:50:19,606 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1429079634] [2024-11-19 14:50:19,606 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:19,607 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:19,607 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:19,607 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:50:19,607 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:50:19,607 INFO L87 Difference]: Start difference. First operand 58846 states and 107949 transitions. cyclomatic complexity: 49104 Second operand has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:20,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:20,592 INFO L93 Difference]: Finished difference Result 62717 states and 115053 transitions. [2024-11-19 14:50:20,592 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 62717 states and 115053 transitions. [2024-11-19 14:50:20,863 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 59311 [2024-11-19 14:50:21,046 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 62717 states to 62717 states and 115053 transitions. [2024-11-19 14:50:21,047 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 62717 [2024-11-19 14:50:21,098 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 62717 [2024-11-19 14:50:21,098 INFO L73 IsDeterministic]: Start isDeterministic. Operand 62717 states and 115053 transitions. [2024-11-19 14:50:21,136 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:21,136 INFO L218 hiAutomatonCegarLoop]: Abstraction has 62717 states and 115053 transitions. [2024-11-19 14:50:21,172 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62717 states and 115053 transitions. [2024-11-19 14:50:21,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62717 to 62591. [2024-11-19 14:50:21,639 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62591 states, 62591 states have (on average 1.8350242047578726) internal successors, (114856), 62590 states have internal predecessors, (114856), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:22,359 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62591 states to 62591 states and 114856 transitions. [2024-11-19 14:50:22,359 INFO L240 hiAutomatonCegarLoop]: Abstraction has 62591 states and 114856 transitions. [2024-11-19 14:50:22,361 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-19 14:50:22,362 INFO L425 stractBuchiCegarLoop]: Abstraction has 62591 states and 114856 transitions. [2024-11-19 14:50:22,362 INFO L332 stractBuchiCegarLoop]: ======== Iteration 33 ============ [2024-11-19 14:50:22,362 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 62591 states and 114856 transitions. [2024-11-19 14:50:22,599 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 59240 [2024-11-19 14:50:22,599 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-19 14:50:22,599 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-19 14:50:22,610 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:22,610 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-19 14:50:22,611 INFO L745 eck$LassoCheckResult]: Stem: 1700366#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1700367#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 1701492#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1701019#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1701020#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1700516#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1700517#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1702134#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1702326#L1829 assume !(0 == getOrigin_~person#1); 1701062#L1833 assume !(1 == getOrigin_~person#1); 1701058#L1837 assume !(2 == getOrigin_~person#1); 1701059#L1841 assume !(3 == getOrigin_~person#1); 1701880#L1845 assume !(4 == getOrigin_~person#1); 1702224#L1849 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1700387#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1700388#L1463 assume !(0 == initPersonOnFloor_~floor#1); 1702213#L1490 assume 1 == initPersonOnFloor_~floor#1; 1702006#L1491 assume !(0 == initPersonOnFloor_~person#1); 1702007#L1494 assume !(1 == initPersonOnFloor_~person#1); 1702042#L1497 assume !(2 == initPersonOnFloor_~person#1); 1700410#L1500 assume !(3 == initPersonOnFloor_~person#1); 1700411#L1503 assume !(4 == initPersonOnFloor_~person#1); 1700692#L1506 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1700693#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1701164#L940 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1702258#L943 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 1700086#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1700087#L1255 assume !(0 == callOnFloor_~floorID#1); 1701784#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1700619#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1702553#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1702552#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 1702550#L1829-1 assume !(0 == getOrigin_~person#1); 1702549#L1833-1 assume !(1 == getOrigin_~person#1); 1702548#L1837-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 1702547#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1702546#L1463-1 assume !(0 == initPersonOnFloor_~floor#1); 1702545#L1490-1 assume !(1 == initPersonOnFloor_~floor#1); 1702544#L1517-1 assume 2 == initPersonOnFloor_~floor#1; 1702543#L1518-2 assume !(0 == initPersonOnFloor_~person#1); 1702542#L1521-2 assume !(1 == initPersonOnFloor_~person#1); 1702539#L1524-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1702537#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1702536#L940-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 1702535#L943-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 1702533#L946-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 1702531#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1702530#L1255-2 assume !(0 == callOnFloor_~floorID#1); 1702529#L1258-2 assume !(1 == callOnFloor_~floorID#1); 1702526#L1261-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1702525#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1702524#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1702523#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1702522#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1702521#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1702519#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1700757#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1700758#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1701610#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1702368#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1702551#L2908 assume !(0 != timeShift_~tmp___9~2#1); 1702413#L2999 assume 1 == ~doorState~0;~doorState~0 := 0; 1701518#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1701112#L2351 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1701113#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 1701913#L2355 assume !(0 != stopRequestedInDirection_~tmp~20#1); 1702173#L2361 assume !(~currentFloorID~0 < 0); 1702062#$Ultimate##2286 assume !(~currentFloorID~0 < 0); 1702063#$Ultimate##2292 assume ~currentFloorID~0 < 1; 1701581#L2391 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 1701099#$Ultimate##2308 assume ~currentFloorID~0 < 1; 1701144#L2407 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 1701146#L2408 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1701098#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1702520#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1702075#L2727 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1701179#isTopFloor_returnLabel#2 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 1701180#L2731 assume !(0 != continueInDirection_~tmp~21#1); 1702354#L2737-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1700258#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1700259#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1709873#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1709872#L978 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1709871#$Ultimate##2773 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1709854#$Ultimate##2782 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1709850#$Ultimate##2791 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1709847#$Ultimate##2800 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1709819#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1709801#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1709799#L707-2 [2024-11-19 14:50:22,611 INFO L747 eck$LassoCheckResult]: Loop: 1709799#L707-2 assume !false; 1709797#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1709795#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1709793#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1709791#L715 assume 1 != cleanup_~tmp___0~2#1; 1709789#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1709787#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1709785#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1709782#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1709780#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1709774#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1709745#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1709737#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1709718#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1709712#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1709683#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1709684#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1709679#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 1709680#L1192-26 assume !(1 == isFloorCalling_~floorID#1); 1713357#L1196-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1713356#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1709143#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1709144#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1709138#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1709131#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1709098#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1709100#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1704821#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1704820#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1704638#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1704633#L2351-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1704631#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 1704614#L2355-2 assume !(0 != stopRequestedInDirection_~tmp~20#1); 1704615#L2361-2 assume ~currentFloorID~0 < 0; 1704650#L2362-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1704651#L1188-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1704675#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret64#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret64#1;havoc stopRequestedInDirection_#t~ret64#1; 1704616#L2366-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1704610#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1704607#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1704393#L2727-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 1704386#isTopFloor_returnLabel#7 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 1704377#L2731-9 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 1704373#L2737-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1704370#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1704369#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1704368#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1704367#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1704366#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1704365#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1704358#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1704359#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1705445#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1705444#L707-2 assume !false; 1705443#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1705442#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1705441#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1704284#L715 assume 1 != cleanup_~tmp___0~2#1; 1704275#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1704276#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1705405#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1705402#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 1705397#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1705395#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 1705393#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1705010#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 1705002#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1704997#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1704996#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 1704995#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1704993#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1704992#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1704991#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1704990#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1704989#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1704987#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1704986#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1704984#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 1704983#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1704979#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1704976#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 1701029#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1701030#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1709142#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 1709132#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 1709134#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1709128#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 1709127#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1709111#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1709107#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1709092#L2727-5 assume !(1 == ~currentHeading~0); 1702120#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1702038#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1709885#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1709883#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1709882#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1709881#L978-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1709880#$Ultimate##5367 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1709863#$Ultimate##5376 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1709859#$Ultimate##5385 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1709856#$Ultimate##5394 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1709820#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1709802#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1709799#L707-2 [2024-11-19 14:50:22,612 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:22,612 INFO L85 PathProgramCache]: Analyzing trace with hash -171324847, now seen corresponding path program 1 times [2024-11-19 14:50:22,613 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:22,613 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1678359796] [2024-11-19 14:50:22,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:22,613 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:22,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:22,697 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-19 14:50:22,698 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:22,698 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1678359796] [2024-11-19 14:50:22,698 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1678359796] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:22,698 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:22,698 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:50:22,698 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2088261674] [2024-11-19 14:50:22,698 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:22,699 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-19 14:50:22,699 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-19 14:50:22,699 INFO L85 PathProgramCache]: Analyzing trace with hash -1153681683, now seen corresponding path program 1 times [2024-11-19 14:50:22,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-19 14:50:22,699 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1818567832] [2024-11-19 14:50:22,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-19 14:50:22,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-19 14:50:22,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-19 14:50:22,757 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-11-19 14:50:22,757 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-19 14:50:22,757 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1818567832] [2024-11-19 14:50:22,757 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1818567832] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-19 14:50:22,757 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-19 14:50:22,757 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-19 14:50:22,758 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1279577127] [2024-11-19 14:50:22,758 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-19 14:50:22,758 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-19 14:50:22,758 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-19 14:50:22,758 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-19 14:50:22,758 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-19 14:50:22,759 INFO L87 Difference]: Start difference. First operand 62591 states and 114856 transitions. cyclomatic complexity: 52267 Second operand has 5 states, 5 states have (on average 17.8) internal successors, (89), 5 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-19 14:50:23,066 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-19 14:50:23,066 INFO L93 Difference]: Finished difference Result 62724 states and 114845 transitions. [2024-11-19 14:50:23,067 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 62724 states and 114845 transitions. [2024-11-19 14:50:23,389 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 59370 [2024-11-19 14:50:23,611 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 62724 states to 62724 states and 114845 transitions. [2024-11-19 14:50:23,611 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 62724 [2024-11-19 14:50:23,674 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 62724 [2024-11-19 14:50:23,674 INFO L73 IsDeterministic]: Start isDeterministic. Operand 62724 states and 114845 transitions. [2024-11-19 14:50:23,727 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-19 14:50:23,727 INFO L218 hiAutomatonCegarLoop]: Abstraction has 62724 states and 114845 transitions. [2024-11-19 14:50:23,764 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62724 states and 114845 transitions.